Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198871 8.1 重要
Network
- HPE KeyView の Filter SDK における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-4388 2016-10-11 10:25 2016-09-29 Show GitHub Exploit DB Packet Storm
198872 8.1 重要
Network
- HPE KeyView の Filter SDK における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-4387 2016-10-11 10:25 2016-09-29 Show GitHub Exploit DB Packet Storm
198873 5.4 警告
Network
IBM - IBM Multi-Enterprise Integration Gateway および B2B Advanced Communications で使用される IBM 10x におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5892 2016-10-11 10:18 2016-09-28 Show GitHub Exploit DB Packet Storm
198874 8.8 重要
Network
アップル
Google
xmlsoft.org
- Google Chrome で使用される libxml2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5131 2016-10-7 16:57 2016-07-20 Show GitHub Exploit DB Packet Storm
198875 9.8 緊急
Network
The PHP Group - PHP の mbstring エクステンションの php_mbregex.c の _php_mb_regex_ereg_replace_exec 関数におけるメモリ二重解放の脆弱性 CWE-Other
その他
CVE-2016-5768 2016-10-7 16:57 2016-06-23 Show GitHub Exploit DB Packet Storm
198876 9.8 緊急
Network
The PHP Group - PHP の mcrypt エクステンションの mcrypt.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5769 2016-10-7 16:55 2016-06-23 Show GitHub Exploit DB Packet Storm
198877 9.8 緊急
Network
The PHP Group - PHP の SPL エクステンションの spl_directory.c の SplFileObject::fread 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5770 2016-10-7 16:54 2016-06-23 Show GitHub Exploit DB Packet Storm
198878 9.8 緊急
Network
The PHP Group - PHP の SPL エクステンションの spl_array.c における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5771 2016-10-7 16:53 2016-06-23 Show GitHub Exploit DB Packet Storm
198879 9.8 緊急
Network
The PHP Group - PHP の WDDX エクステンションの wddx.c の php_wddx_process_data 関数におけるメモリ二重解放の脆弱性 CWE-Other
その他
CVE-2016-5772 2016-10-7 16:51 2016-06-23 Show GitHub Exploit DB Packet Storm
198880 9.8 緊急
Network
The PHP Group - PHP の zip エクステンションの php_zip.c における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5773 2016-10-7 16:49 2016-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
831 8.8 HIGH
Network
vmware spring_ai SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0… CWE-89
SQL Injection
CVE-2026-40978 2026-04-30 03:16 2026-04-28 Show GitHub Exploit DB Packet Storm
832 6.1 MEDIUM
Local
vmware spring_ai In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5) CWE-377
 Insecure Temporary File
CVE-2026-40979 2026-04-30 03:16 2026-04-28 Show GitHub Exploit DB Packet Storm
833 5.3 MEDIUM
Network
- - A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeChat Work Platform Ad… CWE-22
Path Traversal
CVE-2026-7396 2026-04-30 03:16 2026-04-30 Show GitHub Exploit DB Packet Storm
834 4.7 MEDIUM
Network
- - A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/view_order.php of the component GET Parame… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7394 2026-04-30 03:16 2026-04-30 Show GitHub Exploit DB Packet Storm
835 8.6 HIGH
Network
- - A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets with an inflated Client ID length, could ca… CWE-130
 Improper Handling of Length Parameter Inconsistency
CVE-2026-5367 2026-04-30 03:16 2026-04-24 Show GitHub Exploit DB Packet Storm
836 6.5 MEDIUM
Network
vmware spring_ai In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by `ForkPDFLayoutTextStripper`. Affected versions: Spring AI: 1.0.0 - 1.… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-40980 2026-04-30 03:15 2026-04-28 Show GitHub Exploit DB Packet Storm
837 7.1 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: fix off-by-8 bounds check in check_wsl_eas() The bounds check uses (u8 *)ea + nlen + 1 + vlen as the end of the EA n… CWE-125
Out-of-bounds Read
CVE-2026-31614 2026-04-30 03:03 2026-04-25 Show GitHub Exploit DB Packet Storm
838 8.8 HIGH
Network
tenda f456_firmware A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Re… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7101 2026-04-30 02:42 2026-04-27 Show GitHub Exploit DB Packet Storm
839 8.8 HIGH
Network
tenda f456_firmware A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac results in comm… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7102 2026-04-30 02:41 2026-04-27 Show GitHub Exploit DB Packet Storm
840 5.5 MEDIUM
Local
foxit pdf_editor
pdf_reader
Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately causing the program to terminate. CWE-248
 Uncaught Exception
CVE-2026-5937 2026-04-30 02:31 2026-04-27 Show GitHub Exploit DB Packet Storm