Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198071 8.1 重要
Network
シスコシステムズ - Cisco IOS および IOS XE の DNS フォワーダにおけるプロセスメモリから重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6380 2016-11-10 16:36 2016-09-28 Show GitHub Exploit DB Packet Storm
198072 9.8 緊急
Network
日立 - JP1/IT Desktop Management 2 - Manager および JP1/NETM/DM における脆弱性 CWE-noinfo
情報不足
- 2016-11-10 16:28 2016-10-31 Show GitHub Exploit DB Packet Storm
198073 9.8 緊急
Network
Sirona - Dentsply Sirona CDR DICOM に認証情報がハードコードされている問題 CWE-Other
その他
CVE-2016-6530 2016-11-10 16:27 2016-09-6 Show GitHub Exploit DB Packet Storm
198074 7.5 重要
Network
ISC, Inc. - ISC BIND の DNAME レコードを含む応答パケットの処理に脆弱性 CWE-20
CWE-Other
CVE-2016-8864 2016-11-10 16:07 2016-11-2 Show GitHub Exploit DB Packet Storm
198075 10 危険 日本電気
アップル
サイバートラスト株式会社
富士通
アライドテレシス
サン・マイクロシステムズ
インターネットイニシアティブ
Net-SNMP
アラクサラネットワークス
シスコシステムズ
日立
レッドハット
- SNMPv3 実装の不適切な HMAC 処理による認証回避の脆弱性 CWE-287
不適切な認証
CVE-2008-0960 2016-11-10 16:06 2008-06-11 Show GitHub Exploit DB Packet Storm
198076 7.8 重要
Local
NVIDIA - 複数の NVIDIA 製品の Windows GPU ディスプレイドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8811 2016-11-10 15:40 2016-10-19 Show GitHub Exploit DB Packet Storm
198077 7.8 重要
Local
NVIDIA - 複数の NVIDIA 製品の Windows GPU ディスプレイドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8810 2016-11-10 15:40 2016-10-19 Show GitHub Exploit DB Packet Storm
198078 7.8 重要
Local
NVIDIA - 複数の NVIDIA 製品の Windows GPU ディスプレイドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-264
CVE-2016-8809 2016-11-10 15:40 2016-10-19 Show GitHub Exploit DB Packet Storm
198079 7.8 重要
Local
NVIDIA - 複数の NVIDIA 製品の Windows GPU ディスプレイドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8808 2016-11-10 15:40 2016-10-19 Show GitHub Exploit DB Packet Storm
198080 7.8 重要
Local
NVIDIA - 複数の NVIDIA 製品の Windows GPU ディスプレイドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8807 2016-11-10 15:40 2016-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 9.8 CRITICAL
Network
absolute secure_access CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrit… Update CWE-121
Stack-based Buffer Overflow
CVE-2026-33447 2026-05-5 11:26 2026-05-1 Show GitHub Exploit DB Packet Storm
212 9.8 CRITICAL
Network
absolute secure_access CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overw… Update CWE-120
Classic Buffer Overflow
CVE-2026-33446 2026-05-5 11:19 2026-05-1 Show GitHub Exploit DB Packet Storm
213 7.2 HIGH
Network
amazon amazon_ecs_container_agent Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0 might allow a remote authenticat… Update CWE-78
OS Command 
CVE-2026-7461 2026-05-5 11:18 2026-05-1 Show GitHub Exploit DB Packet Storm
214 5.9 MEDIUM
Network
hex hex Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency integrity bypass via unverified lockfile checksums. Hex stores checksums for … Update CWE-354
CWE-494
 Improper Validation of Integrity Check Value
 Download of Code Without Integrity Check
CVE-2026-32148 2026-05-5 11:16 2026-05-1 Show GitHub Exploit DB Packet Storm
215 9.8 CRITICAL
Network
- - The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14. This is due to the guest waitlist verification flow not invalidating or r… New CWE-287
Improper Authentication
CVE-2026-5722 2026-05-5 11:16 2026-05-5 Show GitHub Exploit DB Packet Storm
216 5.4 MEDIUM
Network
- - @diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file. Update CWE-79
Cross-site Scripting
CVE-2026-40201 2026-05-5 11:16 2026-05-1 Show GitHub Exploit DB Packet Storm
217 7.5 HIGH
Network
mercurycom mipc252w_firmware A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://<IP>:554/stream… Update CWE-476
 NULL Pointer Dereference
CVE-2026-31256 2026-05-5 10:30 2026-04-28 Show GitHub Exploit DB Packet Storm
218 5.3 MEDIUM
Network
- - An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.… New CWE-36
 Absolute Path Traversal
CVE-2026-44029 2026-05-5 10:16 2026-05-5 Show GitHub Exploit DB Packet Storm
219 7.5 HIGH
Local
- - An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser could lead to a stack-to-heap overflow when the parser is run on a coroutine st… New CWE-674
 Uncontrolled Recursion
CVE-2026-44028 2026-05-5 10:16 2026-05-5 Show GitHub Exploit DB Packet Storm
220 9.8 CRITICAL
Network
- - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing attackers to write code which can escape from the VM… New CWE-94
CWE-693
Code Injection
 Protection Mechanism Failure
CVE-2026-24120 2026-05-5 10:16 2026-05-5 Show GitHub Exploit DB Packet Storm