Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
198461 9.8 緊急
Network 		LHa for UNIX project - LHA の header.c における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2016-1925 2017-02-6 17:41 2016-01-16 Show GitHub Exploit DB Packet Storm
198462 7.5 重要
Network 		OneLogin, Inc. - Ruby-saml における XML 署名ラッピング攻撃を実行される脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2016-5697 2017-02-6 17:41 2016-06-24 Show GitHub Exploit DB Packet Storm
198463 8.8 重要
Network 		Snort.org - Snort における任意のコードを実行される脆弱性 CWE-426
信頼性のない検索パス 		CVE-2016-1417 2017-02-6 17:40 2016-09-29 Show GitHub Exploit DB Packet Storm
198464 8.8 重要
Network 		elfden - WordPress 用 eShop プラグインの eshop-orders.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-0769 2017-02-6 17:34 2016-02-2 Show GitHub Exploit DB Packet Storm
198465 6.1 警告
Network 		elfden - WordPress 用 eShop プラグインの eshop-orders.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0765 2017-02-6 17:33 2016-02-2 Show GitHub Exploit DB Packet Storm
198466 7.8 重要
Local 		Debian
Terminology project		 - Terminology における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション 		CVE-2015-8971 2017-02-6 17:32 2015-08-17 Show GitHub Exploit DB Packet Storm
198467 7.8 重要
Local 		マイクロソフト - Microsoft Skype における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5720 2017-02-6 17:04 2016-09-27 Show GitHub Exploit DB Packet Storm
198468 8.4 重要
Local 		ownCloud - ownCloud Desktop における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-7102 2017-02-6 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
198469 5.9 警告
Network 		ownCloud - ownCloud サーバにおける任意の画像をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5876 2017-02-6 16:24 2016-07-13 Show GitHub Exploit DB Packet Storm
198470 9.8 緊急
Network 		シックス・アパート株式会社 - 複数の Movable Type 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-5742 2017-02-6 16:23 2016-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1901 7.8 HIGH
Local 		- - Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o… CWE-787
 Out-of-bounds Write 		CVE-2026-34676 2026-05-13 03:55 2026-05-13 Show GitHub Exploit DB Packet Storm
1902 7.8 HIGH
Local 		- - Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation… CWE-122
Heap-based Buffer Overflow 		CVE-2026-34687 2026-05-13 03:55 2026-05-13 Show GitHub Exploit DB Packet Storm
1903 7.5 HIGH
Network 		openjsf fast-uri fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was treated like real slashes and par… CWE-22
Path Traversal 		CVE-2026-6321 2026-05-13 03:54 2026-05-5 Show GitHub Exploit DB Packet Storm
1904 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() Commit 38a6f0865796 ("net: sched: support hash selecting tx queu… CWE-369
 Divide By Zero 		CVE-2026-43238 2026-05-13 03:54 2026-05-6 Show GitHub Exploit DB Packet Storm
1905 8.8 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces() It was possible for two query interface works to be concurrently trying to upd… NVD-CWE-noinfo
CVE-2026-43239 2026-05-13 03:53 2026-05-6 Show GitHub Exploit DB Packet Storm
1906 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() The ChipIdea UDC driver can encounter "not page aligned sg buffer" error… CWE-787
 Out-of-bounds Write 		CVE-2026-43250 2026-05-13 03:51 2026-05-6 Show GitHub Exploit DB Packet Storm
1907 9.8 CRITICAL
Network 		paloaltonetworks
siemens 		pan-os
ruggedcom_ape1808_firmware 		A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code w… CWE-787
 Out-of-bounds Write 		CVE-2026-0300 2026-05-13 03:47 2026-05-7 Show GitHub Exploit DB Packet Storm
1908 7.5 HIGH
Network 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-28990 2026-05-13 03:46 2026-05-12 Show GitHub Exploit DB Packet Storm
1909 7.5 HIGH
Network 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watch… CWE-284
Improper Access Control 		CVE-2026-28974 2026-05-13 03:46 2026-05-12 Show GitHub Exploit DB Packet Storm
1910 7.5 HIGH
Network 		apple ipados
iphone_os 		A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.5 and iPadOS 26.5. A user may be able to view restricted content from the lock screen. CWE-284
Improper Access Control 		CVE-2026-28965 2026-05-13 03:46 2026-05-12 Show GitHub Exploit DB Packet Storm