Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198391	5.5	警告 Local	zziplib project	-	zziplib の fetch.c の __zzip_get64 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-5975	2017-03-15 16:56	2017-02-9	Show	GitHub Exploit DB Packet Storm

198392	5.5	警告 Local	zziplib project	-	zziplib の fetch.c の __zzip_get32 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-5974	2017-03-15 16:56	2017-02-9	Show	GitHub Exploit DB Packet Storm

198393	7.5	重要 Network	PNG Development Group	-	libpng の png_set_text_2 関数における NULL ポインタデリファレンスを引き起こされる脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-10087	2017-03-15 16:55	2016-12-29	Show	GitHub Exploit DB Packet Storm

198394	5.8	警告 Network	シスコシステムズ	-	Cisco ESA および WSA の AsyncOS ソフトウェアの MIME スキャナにおけるデバイス上で設定されたユーザフィルタを回避される脆弱性	CWE-20 不適切な入力確認	CVE-2017-3827	2017-03-15 16:55	2017-02-23	Show	GitHub Exploit DB Packet Storm

198395	8.8	重要 Network	シスコシステムズ	-	Cisco ASA ソフトウェアのクライアントレス SSL VPN 機能の CIFS コードにおけるヒープオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-3807	2017-03-15 16:55	2017-02-8	Show	GitHub Exploit DB Packet Storm

198396	7.3	重要 Local	Simon Tatham	-	Putty における DLL ハイジャック攻撃を実行される脆弱性	CWE-426 信頼性のない検索パス	CVE-2016-6167	2017-03-15 16:54	2016-07-1	Show	GitHub Exploit DB Packet Storm

198397	5.5	警告 Local	Mp3splt project	-	mp3splt の options_manager.c の free_options 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-5851	2017-03-15 16:45	2017-02-1	Show	GitHub Exploit DB Packet Storm

198398	5.5	警告 Local	Mp3splt project	-	mp3splt の options_manager.c の free_options 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-416 解放済みメモリの使用	CVE-2017-5666	2017-03-15 16:45	2017-01-29	Show	GitHub Exploit DB Packet Storm

198399	5.3	警告 Network	シスコシステムズ	-	Cisco Firepower Threat Defense の Firepower Device Manager における任意のエントリを監査ログに追加される脆弱性	CWE-20 不適切な入力確認	CVE-2017-3822	2017-03-15 16:41	2017-02-1	Show	GitHub Exploit DB Packet Storm

198400	6.5	警告 Network	シスコシステムズ	-	Cisco IOS XE が稼動する ASR 1000 シリーズアグリゲーションサービスルータの SNMP 機能における CPU の大量使用を引き起こされる脆弱性	CWE-399 リソース管理の問題	CVE-2017-3820	2017-03-15 16:41	2017-02-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2561	3.1	LOW Network	-	-	A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that triggers incorrect format string pro…	CWE-134 Use of Externally-Controlled Format String	CVE-2026-7835	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2562	3.1	LOW Network	-	-	An incorrect calculation in the hextoint macro in Netatalk 2.0.0 through 4.4.2 due to improper uppercase character handling allows a remote authenticated attacker to cause limited data modification v…	CWE-682 Incorrect Calculation	CVE-2026-7836	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2563	3.1	LOW Network	-	-	A dead bounds check in the Spotlight RPC unmarshaller in Netatalk 3.0.0 through 4.4.2 results in an unreachable code path that provides no effective bounds protection, which may allow a remote authen…	CWE-561 Dead Code	CVE-2026-44057	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2564	3.7	LOW Network	-	-	Netatalk 3.1.2 through 4.4.2 is compiled without FORTIFY_SOURCE, which disables built-in buffer overflow detection at runtime, potentially allowing a remote attacker to cause a minor denial of servic…	CWE-693 Protection Mechanism Failure	CVE-2026-44071	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2565	3.7	LOW Network	-	-	Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker…	CWE-682 Incorrect Calculation	CVE-2026-44074	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2566	3.7	LOW Network	-	-	A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch case to fall through into DSIOPT_SERVQUANT, resulting in unintended session op…	CWE-484	CVE-2026-44075	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2567	3.7	LOW Network	-	-	A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a remote attacker to cause limited da…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-7837	2026-05-22 00:20	2026-05-21	Show	GitHub Exploit DB Packet Storm

2568	10.0	CRITICAL Network	-	-	Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files. This issue affects Gift Cards For WooCommerce Pro: from n/a th…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2026-45444	2026-05-22 00:19	2026-05-21	Show	GitHub Exploit DB Packet Storm

2569	6.1	MEDIUM Network	-	-	TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows attackers to execute arbitrary JavaScript by delivering a crafted JSON payload cont…	CWE-79 Cross-site Scripting	CVE-2026-47099	2026-05-22 00:19	2026-05-21	Show	GitHub Exploit DB Packet Storm

2570	4.3	MEDIUM Network	-	-	The Broadstreet plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.52.2 via the get_sponsored_meta AJAX action due to missing validation on…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-1881	2026-05-22 00:19	2026-05-21	Show	GitHub Exploit DB Packet Storm