Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198021 6.1 警告
Network
Moodle - Moodle の課題提出ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-2578 2017-01-31 14:29 2017-01-17 Show GitHub Exploit DB Packet Storm
198022 5.3 警告
Network
Moodle - Moodle におけるフォーラムの属性が不正にサニタイズされる脆弱性 CWE-20
不適切な入力確認
CVE-2017-2576 2017-01-31 14:29 2017-01-17 Show GitHub Exploit DB Packet Storm
198023 5.3 警告
Network
Moodle - Moodle におけるコースのノートを閲覧される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8644 2017-01-31 14:28 2016-11-21 Show GitHub Exploit DB Packet Storm
198024 4.3 警告
Network
Moodle - Moodle における管理者情報を編集される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-8643 2017-01-31 14:28 2016-11-21 Show GitHub Exploit DB Packet Storm
198025 5.3 警告
Network
Moodle - Moodle の question エンジンにおけるファイルにアクセスされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-8642 2017-01-31 14:28 2016-11-21 Show GitHub Exploit DB Packet Storm
198026 7.3 重要
Network
Moodle - Moodle のウェブサービストークンにおける脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2016-7038 2017-01-31 14:27 2016-09-12 Show GitHub Exploit DB Packet Storm
198027 5.4 警告
Network
Moodle - Moodle の event monitor における未登録のユーザに通知が送信される脆弱性 CWE-200
情報漏えい
CVE-2016-5014 2017-01-31 14:27 2016-07-19 Show GitHub Exploit DB Packet Storm
198028 5.4 警告
Network
Moodle - Moodle における電子メールのヘッダにテキストを挿入される脆弱性 CWE-74
インジェクション
CVE-2016-5013 2017-01-31 14:27 2016-07-19 Show GitHub Exploit DB Packet Storm
198029 5.3 警告
Network
Moodle - Moodle の用語集の検索におけるエントリを表示される脆弱性 CWE-200
情報漏えい
CVE-2016-5012 2017-01-31 14:27 2016-07-19 Show GitHub Exploit DB Packet Storm
198030 7.5 重要
Network
HexChat - HexChat の common/inbound.c の inbound_cap_ls 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-2233 2017-01-31 14:18 2016-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1281 6.2 MEDIUM
Local
apple ipados
iphone_os
macos
tvos
visionos
watchos
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, mac… New CWE-787
 Out-of-bounds Write
CVE-2026-43666 2026-05-13 23:06 2026-05-12 Show GitHub Exploit DB Packet Storm
1282 7.5 HIGH
Network
apple ipados
iphone_os
macos
tvos
visionos
watchos
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS T… New CWE-416
 Use After Free
CVE-2026-43668 2026-05-13 23:06 2026-05-12 Show GitHub Exploit DB Packet Storm
1283 8.6 HIGH
Network
inngest inngest Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows un… Update CWE-200
CWE-497
Information Exposure
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-42047 2026-05-13 23:06 2026-05-8 Show GitHub Exploit DB Packet Storm
1284 6.5 MEDIUM
Network
apache apache-airflow-providers-opensearch The OpenSearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:password@server.example.com:9200`), wrote the full host URL — including the embed… Update CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-43826 2026-05-13 23:05 2026-05-11 Show GitHub Exploit DB Packet Storm
1285 7.5 HIGH
Network
apple ipados
iphone_os
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denia… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-28872 2026-05-13 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
1286 7.5 HIGH
Network
apple ipados
iphone_os
macos
visionos
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5,… New CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-28906 2026-05-13 23:03 2026-05-12 Show GitHub Exploit DB Packet Storm
1287 3.3 LOW
Local
apple macos This issue was addressed with improved permissions checking. This issue is fixed in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files. New CWE-284
Improper Access Control
CVE-2026-28910 2026-05-13 23:02 2026-05-12 Show GitHub Exploit DB Packet Storm
1288 5.4 MEDIUM
Network
apple ipados
iphone_os
macos
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may … New CWE-787
 Out-of-bounds Write
CVE-2026-28819 2026-05-13 23:00 2026-05-12 Show GitHub Exploit DB Packet Storm
1289 6.5 MEDIUM
Network
apple ipados
iphone_os
macos
tvos
visionos
watchos
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Parsing a malicio… New CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-28918 2026-05-13 22:57 2026-05-12 Show GitHub Exploit DB Packet Storm
1290 9.8 CRITICAL
Network
gnu
redhat
gnutls
hardened_images
openshift_container_platform
enterprise_linux
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacke… Update CWE-626
 Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42010 2026-05-13 22:54 2026-05-7 Show GitHub Exploit DB Packet Storm