Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199081 7.5 重要
Network
Pivotal Software, Inc.
IBM
- Pivotal Spring Security におけるセキュリティ制約を回避される脆弱性 CWE-417
チャネルおよびパスのエラー
CVE-2016-9879 2017-01-23 14:54 2016-12-28 Show GitHub Exploit DB Packet Storm
199082 9.8 緊急
Network
Lexmark - Lexmark Perspective Document Filters の変換機能の Bzip2 構文解析におけるスタックベースのバッファオーバーフローの脆弱性 CWE-787
境界外書き込み
CVE-2016-4336 2017-01-23 12:28 2016-08-6 Show GitHub Exploit DB Packet Storm
199083 7.5 重要
Network
The Chicken Team - CHICKEN の "process-execute" および "process-spawn" プロシージャにおけるリソースの枯渇の脆弱性 CWE-400
リソースの枯渇
CVE-2016-6831 2017-01-23 12:25 2016-08-12 Show GitHub Exploit DB Packet Storm
199084 9.8 緊急
Network
The Chicken Team - CHICKEN Scheme の "process-execute" および "process-spawn" プロシージャにおけるバッファオーバーランの脆弱性 CWE-119
バッファエラー
CVE-2016-6830 2017-01-23 12:25 2016-08-12 Show GitHub Exploit DB Packet Storm
199085 9.8 緊急
Network
Ruby-lang.org - Ruby の Fiddle::Function.new の "初期化" 関数におけるヒープオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-2339 2017-01-23 12:07 2016-06-14 Show GitHub Exploit DB Packet Storm
199086 9.8 緊急
Network
Ruby-lang.org - Ruby の TclTkIp クラスの _cancel_eval メソッドにおける任意のコードを実行される脆弱性 CWE-843
型の取り違え
CVE-2016-2337 2017-01-23 12:07 2016-06-14 Show GitHub Exploit DB Packet Storm
199087 9.8 緊急
Network
Ruby-lang.org - Ruby の WIN32OLE クラスの複数のメソッドにおける任意のコードを実行される脆弱性 CWE-843
型の取り違え
CVE-2016-2336 2017-01-23 12:07 2016-06-14 Show GitHub Exploit DB Packet Storm
199088 6.1 警告
Network
MantisBT Group - MantisBT の MantisBT Filter API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6837 2017-01-23 11:48 2016-08-15 Show GitHub Exploit DB Packet Storm
199089 5.9 警告
Network
F5 Networks - BIG-IP システムのバーチャルサーバにおける Traffic Management Microkernel を再起動される脆弱性 CWE-20
不適切な入力確認
CVE-2016-9247 2017-01-23 11:45 2016-12-15 Show GitHub Exploit DB Packet Storm
199090 9.8 緊急
Network
The PHP Group - PHP の Zend/zend_hash.c における任意のコードを実行される脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-5340 2017-01-23 11:40 2017-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2181 4.9 MEDIUM
Network
- - Flarum is open-source forum software. Prior to versions 1.8.16 and 2.0.0-rc.1, Flarum's patch for CVE-2023-27577 restricted the @import and data-uri() LESS features in the custom_less setting, but th… CWE-22
CWE-918
Path Traversal
Server-Side Request Forgery (SSRF) 
CVE-2026-41887 2026-05-13 01:45 2026-05-9 Show GitHub Exploit DB Packet Storm
2182 5.4 MEDIUM
Network
- - Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting (XSS) vulnerability exists in the campaign management feature, where the email bo… CWE-79
Cross-site Scripting
CVE-2026-42192 2026-05-13 01:45 2026-05-9 Show GitHub Exploit DB Packet Storm
2183 - - - SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.0 to before version 1.0.2, Opening a .gpp file in the SolidCAM Postprocessor ID… CWE-400
CWE-611
CWE-776
 Uncontrolled Resource Consumption
XXE
XML Entity Expansion
CVE-2026-42212 2026-05-13 01:43 2026-05-9 Show GitHub Exploit DB Packet Storm
2184 - - - SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM. From version 1.0.0 to before version 1.0.2, the inc "filename" directive in GPPL postprocessor f… CWE-22
CWE-200
CWE-295
CWE-918
Path Traversal
Information Exposure
Improper Certificate Validation 
Server-Side Request Forgery (SSRF) 
CVE-2026-42213 2026-05-13 01:43 2026-05-9 Show GitHub Exploit DB Packet Storm
2185 6.8 MEDIUM
Network
- - There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission. CWE-284
Improper Access Control
CVE-2026-1749 2026-05-13 01:42 2026-05-9 Show GitHub Exploit DB Packet Storm
2186 5.3 MEDIUM
Adjacent
- - Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to… - CVE-2026-32683 2026-05-13 01:42 2026-05-9 Show GitHub Exploit DB Packet Storm
2187 7.2 HIGH
Network
- - Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can e… CWE-78
OS Command 
CVE-2026-3828 2026-05-13 01:42 2026-05-9 Show GitHub Exploit DB Packet Storm
2188 - - - FastGPT is an AI Agent building platform. In versions 4.14.13 and prior, the code-sandbox component suffers from insufficient resource isolation and uncontrolled resource consumption. The service rel… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42343 2026-05-13 01:41 2026-05-9 Show GitHub Exploit DB Packet Storm
2189 7.5 HIGH
Network
- - pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, a raw string path concatenation vulnerability in pygeoapi's STAC FileSystem… CWE-22
Path Traversal
CVE-2026-42351 2026-05-13 01:41 2026-05-9 Show GitHub Exploit DB Packet Storm
2190 8.6 HIGH
Network
- - pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can use the subscriber object to reques… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42352 2026-05-13 01:41 2026-05-9 Show GitHub Exploit DB Packet Storm