Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
197781	8.8	重要 Network	s9y	-	Serendipity におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-5476	2017-01-27 10:57	2017-01-12	Show	GitHub Exploit DB Packet Storm

197782	8.8	重要 Network	s9y	-	Serendipity の comment.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-5475	2017-01-27 10:57	2017-01-12	Show	GitHub Exploit DB Packet Storm

197783	6.1	警告 Network	s9y	-	Serendipity の comment.php におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2017-5474	2017-01-27 10:57	2017-01-12	Show	GitHub Exploit DB Packet Storm

197784	5.5	警告 Local	JasPer Project	-	JasPer の jpc_dec.c の jpc_dec_tiledecode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-8883	2017-01-27 10:54	2016-10-20	Show	GitHub Exploit DB Packet Storm

197785	5.5	警告 Local	JasPer Project	-	JasPer の libjasper/jpc/jpc_dec.c の jpc_dec_tilefini 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-8882	2017-01-27 10:54	2016-10-20	Show	GitHub Exploit DB Packet Storm

197786	8.8	重要 Network	Liferay	-	Liferay Portal における任意のシェルコマンドを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-5327	2017-01-27 10:53	2010-01-15	Show	GitHub Exploit DB Packet Storm

197787	7.5	重要 Network	マイクロソフト日立	-	複数の Microsoft Windows 製品のローカルセキュリティ機関サブシステムサービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2017-0004	2017-01-27 10:43	2017-01-10	Show	GitHub Exploit DB Packet Storm

197788	7.5	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor の CliMonitorReportServlet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8207	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

197789	7.5	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor のサーブレット SoftwareImageUpload におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8206	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

197790	9.8	緊急 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor の DashboardFileReceiveServlet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8205	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
691	7.8	HIGH Local	-	-	libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows an attacker to cause a controlled heap out-of-boun… New	CWE-122 CWE-190 CWE-787 Heap-based Buffer Overflow Integer Overflow or Wraparound Out-of-bounds Write	CVE-2026-42046	2026-05-12 23:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

692	7.3	HIGH Network	-	-	An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function New	CWE-94 Code Injection	CVE-2026-37630	2026-05-12 23:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

693	8.8	HIGH Network	-	-	EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient… New	CWE-77 Command Injection	CVE-2026-36734	2026-05-12 23:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

694	8.1	HIGH Network	-	-	Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/s… New	CWE-78 OS Command	CVE-2026-30635	2026-05-12 23:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

695	7.5	HIGH Network	-	-	A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files f… New	CWE-22 Path Traversal	CVE-2026-2614	2026-05-12 23:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

696	-		-	-	Reserved. Details will be published at disclosure. New	-	CVE-2026-45391	2026-05-12 23:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

697	-		-	-	Reserved. Details will be published at disclosure. New	-	CVE-2026-45392	2026-05-12 23:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

698	-		-	-	Reserved. Details will be published at disclosure. New	-	CVE-2026-45393	2026-05-12 23:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

699	-		-	-	dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-co… New	-	CVE-2026-2291	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

700	-		-	-	Wellbia's XIGNCODE3 xhunter1.sys kernel driver Privilege Escalation Vulnerability provides access to IRP_MJ_REITS command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Cr… New	-	CVE-2026-3609	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm