Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197881 5.5 警告
Local
GNOME Project - GNOME Structured File Library の gsf-infile-tar.c のtar_directory_for_file() 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-9888 2016-12-9 11:30 2016-12-3 Show GitHub Exploit DB Packet Storm
197882 7.8 重要
Local
Linux - Linux Kernel の net/packet/af_packet.c における権限を取得される脆弱性 CWE-362
CWE-416
CVE-2016-8655 2016-12-9 11:04 2016-12-1 Show GitHub Exploit DB Packet Storm
197883 4.3 警告 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox におけるアドレスバーを偽装される脆弱性 CWE-Other
その他
CVE-2016-1965 2016-12-8 18:14 2016-03-8 Show GitHub Exploit DB Packet Storm
197884 6.8 警告 Mozilla Foundation
openSUSE project
SUSE
オラクル
- Mozilla Firefox の AtomicBaseIncDec 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-1964 2016-12-8 18:14 2016-03-8 Show GitHub Exploit DB Packet Storm
197885 10 危険 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox の mozilla::DataChannelConnection::Close 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-1962 2016-12-8 18:14 2016-03-8 Show GitHub Exploit DB Packet Storm
197886 4.3 警告
Network
日立
オラクル
- Oracle Java SE および Java SE Embedded における CORBA に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3458 2016-12-8 15:15 2016-07-19 Show GitHub Exploit DB Packet Storm
197887 3.7
Network
レッドハット
IBM
MariaDB Corporation Ab.
オラクル
- Oracle MySQL の MySQL Server および MariaDB における Server: Security: Encryption に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3452 2016-12-8 15:15 2016-07-19 Show GitHub Exploit DB Packet Storm
197888 5.5 警告
Local
IBM
openSUSE project
Debian
MariaDB Corporation Ab.
オラクル
レッドハット
- Oracle MySQL の MySQL Server および MariaDB における Server: Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0650 2016-12-8 15:15 2016-04-19 Show GitHub Exploit DB Packet Storm
197889 5.5 警告
Local
IBM
openSUSE project
Debian
MariaDB Corporation Ab.
オラクル
レッドハット
- Oracle MySQL の MySQL Server および MariaDB における Server: PS に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0648 2016-12-8 15:15 2016-04-19 Show GitHub Exploit DB Packet Storm
197890 5.5 警告
Local
IBM
openSUSE project
Debian
MariaDB Corporation Ab.
オラクル
レッドハット
- Oracle MySQL の MySQL Server および MariaDB における Server: FTS に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0647 2016-12-8 15:15 2016-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 5.9 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Themes WEN Logo Slider allows DOM-Based XSS. This issue affects WEN Logo Slider: from n/a th… New CWE-79
Cross-site Scripting
CVE-2025-62127 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
362 5.3 MEDIUM
Network
- - Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bus Ticket… New CWE-862
 Missing Authorization
CVE-2025-66105 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
363 7.6 HIGH
Network
- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection. This issue affects Team Member: from n/a through … New CWE-89
SQL Injection
CVE-2025-68060 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
364 5.4 MEDIUM
Network
- - Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery. This issue affects WPGraphQL: from n/a through 2.5.3. New CWE-352
 Origin Validation Error
CVE-2025-68604 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
365 5.3 MEDIUM
Network
- - Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal Elementor Addons: from n/a bef… New CWE-862
 Missing Authorization
CVE-2026-25436 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
366 5.3 MEDIUM
Network
- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons… New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-25468 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
367 5.3 MEDIUM
Network
- - Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooC… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-27329 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
368 5.3 MEDIUM
Network
- - Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Poster: from n/a through 2.4.1. New CWE-862
 Missing Authorization
CVE-2026-27416 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
369 6.5 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS. This issue affects Royal Elementor Addons: fro… New CWE-79
Cross-site Scripting
CVE-2026-27421 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
370 5.3 MEDIUM
Network
- - The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.51.1. This is due to the `processRequest()` method in `Forminator_Admin_Module_Edit_… New CWE-862
 Missing Authorization
CVE-2026-6222 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm