Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199091 9.8 緊急
Network 		MailCWP project - MailCWP におけるリモートでファイルをアップロードされる脆弱性 CWE-284
CWE-77
CVE-2016-1000156 2016-12-20 12:33 2016-11-1 Show GitHub Exploit DB Packet Storm
199092 7.4 重要
Network 		Open-Xchange - Open-Xchange OX AppSuite の "defer" サーブレットにおけるクライアントを特定の URL にリダイレクトされる脆弱性 CWE-601
オープンリダイレクト 		CVE-2016-3174 2016-12-20 12:19 2016-03-29 Show GitHub Exploit DB Packet Storm
199093 9.8 緊急
Network 		アドビシステムズ - Adobe InDesign および InDesign Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-7886 2016-12-20 09:47 2016-12-13 Show GitHub Exploit DB Packet Storm
199094 7.5 重要
Network 		アドビシステムズ - Adobe Digital Editions における情報を開示される脆弱性 CWE-200
情報漏えい 		CVE-2016-7889 2016-12-19 18:23 2016-12-13 Show GitHub Exploit DB Packet Storm
199095 5.3 警告
Network 		アドビシステムズ - Adobe Digital Editions におけるメモリアドレスの漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2016-7888 2016-12-19 18:23 2016-12-13 Show GitHub Exploit DB Packet Storm
199096 9.8 緊急
Network 		アドビシステムズ - Adobe Animate におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-7866 2016-12-19 17:52 2016-12-13 Show GitHub Exploit DB Packet Storm
199097 8.8 重要
Network 		アドビシステムズ - Adobe Experience Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-7885 2016-12-19 17:34 2016-12-13 Show GitHub Exploit DB Packet Storm
199098 6.1 警告
Network 		アドビシステムズ - Adobe Experience Manager の DAM アセット作成におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-7884 2016-12-19 17:34 2016-12-13 Show GitHub Exploit DB Packet Storm
199099 6.1 警告
Network 		アドビシステムズ - Adobe Experience Manager の起動作成ウィザードにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-7883 2016-12-19 17:34 2016-12-13 Show GitHub Exploit DB Packet Storm
199100 6.1 警告
Network 		アドビシステムズ - Adobe Experience Manager の WCMDebug フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-7882 2016-12-19 17:34 2016-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1951 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: dm mpath: Add missing dm_put_device when failing to get scsi dh name When commit fd81bc5cca8f ("scsi: device_handler: Return erro… NVD-CWE-noinfo
CVE-2026-43192 2026-05-12 05:36 2026-05-6 Show GitHub Exploit DB Packet Storm
1952 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg() Claude pointed out that there is a nfs4_file refcount leak in nfsd_get_… NVD-CWE-Other
CVE-2026-43193 2026-05-12 05:36 2026-05-6 Show GitHub Exploit DB Packet Storm
1953 9.6 CRITICAL
Network 		praison praisonai PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by default — praisonai.rules… CWE-20
CWE-22
CWE-94
CWE-829
CWE-913
 Improper Input Validation 
Path Traversal
Code Injection
 Inclusion of Functionality from Untrusted Control Sphere
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-44336 2026-05-12 05:25 2026-05-8 Show GitHub Exploit DB Packet Storm
1954 9.8 CRITICAL
Network 		- - RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to c… CWE-427
 Uncontrolled Search Path Element 		CVE-2025-69599 2026-05-12 05:25 2026-05-8 Show GitHub Exploit DB Packet Storm
1955 9.8 CRITICAL
Network 		- - 1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess fil… CWE-94
Code Injection 		CVE-2025-67887 2026-05-12 05:25 2026-05-8 Show GitHub Exploit DB Packet Storm
1956 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requirements: - Size mus… NVD-CWE-noinfo
CVE-2026-43195 2026-05-12 05:21 2026-05-6 Show GitHub Exploit DB Packet Storm
1957 7.5 HIGH
Network 		- - Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host. CWE-611
XXE 		CVE-2023-42346 2026-05-12 05:20 2026-05-8 Show GitHub Exploit DB Packet Storm
1958 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ARM processor Error: don't go past allocated memory If the BIOS generates a very small ARM Processor Error, or an inco… NVD-CWE-noinfo
CVE-2026-43201 2026-05-12 05:20 2026-05-6 Show GitHub Exploit DB Packet Storm
1959 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query Fix a "scheduling while atomic" bug in mlx5e_ipsec_init_macs(… NVD-CWE-noinfo
CVE-2026-43199 2026-05-12 05:12 2026-05-6 Show GitHub Exploit DB Packet Storm
1960 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done… CWE-362
Race Condition 		CVE-2026-43198 2026-05-12 05:12 2026-05-6 Show GitHub Exploit DB Packet Storm