Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199151 8.8 重要
Network
The PHP Group
LibGD project
- PHP で使用される GD Graphics Library の gd.c の gdImageCreate 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5767 2016-10-27 15:38 2016-06-23 Show GitHub Exploit DB Packet Storm
199152 6.4 警告 The PHP Group - PHP の ext/gd/libgd/gd_interpolation.c の gdImageRotateInterpolated 関数における重要な情報を取得される脆弱性 CWE-119
CWE-200
CVE-2016-1903 2016-10-27 15:18 2016-01-7 Show GitHub Exploit DB Packet Storm
199153 7.8 重要
Local
Debian
The Perl Foundation
- Perl の複数のファイルにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1238 2016-10-27 15:18 2016-07-25 Show GitHub Exploit DB Packet Storm
199154 4.8 警告
Network
Google
Linux
オラクル
- Linux Kernel の net/ipv4/tcp_input.c における TCP セッションをハイジャックされる脆弱性 CWE-200
情報漏えい
CVE-2016-5696 2016-10-27 13:46 2016-07-10 Show GitHub Exploit DB Packet Storm
199155 7.8 重要
Local
SUSE
openSUSE project
Canonical
オラクル
Linux
レッドハット
- Linux Kernel の drivers/net/ppp/ppp_generic.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-4805 2016-10-27 13:45 2016-04-20 Show GitHub Exploit DB Packet Storm
199156 9.8 緊急
Network
オラクル - Oracle Fusion Middleware の Oracle WebLogic Server における WLS-WebServices に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5531 2016-10-27 11:51 2016-10-18 Show GitHub Exploit DB Packet Storm
199157 8.8 重要
Network
オラクル - Oracle Fusion Middleware の Oracle GlassFish Server における Java Server Faces に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5519 2016-10-27 11:50 2016-10-18 Show GitHub Exploit DB Packet Storm
199158 3.1
Local
オラクル - Oracle Fusion Middleware の Oracle Identity Manager における App Server に関する脆弱性 CWE-Other
その他
CVE-2016-5506 2016-10-27 11:50 2016-10-18 Show GitHub Exploit DB Packet Storm
199159 7.5 重要
Network
オラクル - Oracle Fusion Middleware の Oracle Discoverer における Viewer に関する脆弱性 CWE-200
情報漏えい
CVE-2016-5500 2016-10-27 11:49 2016-10-18 Show GitHub Exploit DB Packet Storm
199160 6.1 警告
Network
オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Integration Broker に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5529 2016-10-27 11:49 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1261 8.5 HIGH
Network
openstack keystone An issue was discovered in OpenStack Keystone 13 through 29. POST /v3/credentials did not validate that the caller-supplied project_id for an EC2-type credential matched the project of the authentica… CWE-863
 Incorrect Authorization
CVE-2026-43001 2026-05-5 03:25 2026-05-1 Show GitHub Exploit DB Packet Storm
1262 7.8 HIGH
Local
zhinst labone_q The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization. Prior to the fix, this mechanism accepted… CWE-502
 Deserialization of Untrusted Data
CVE-2026-7584 2026-05-5 03:23 2026-05-1 Show GitHub Exploit DB Packet Storm
1263 9.8 CRITICAL
Network
bitwarden cli Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident. CWE-78
CWE-94
OS Command 
Code Injection
CVE-2026-42994 2026-05-5 03:23 2026-05-1 Show GitHub Exploit DB Packet Storm
1264 6.5 MEDIUM
Network
apple container Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3. CWE-522
 Insufficiently Protected Credentials
CVE-2026-28909 2026-05-5 03:22 2026-05-1 Show GitHub Exploit DB Packet Storm
1265 8.8 HIGH
Network
hkuds openharness HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Atta… CWE-78
OS Command 
CVE-2026-7551 2026-05-5 03:22 2026-05-1 Show GitHub Exploit DB Packet Storm
1266 8.1 HIGH
Network
langflow langflow IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete persisted vertex build data for an… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-6542 2026-05-5 03:21 2026-05-1 Show GitHub Exploit DB Packet Storm
1267 9.8 CRITICAL
Network
progress moveit_automation Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from… CWE-305
 Authentication Bypass by Primary Weakness
CVE-2026-4670 2026-05-5 03:20 2026-05-1 Show GitHub Exploit DB Packet Storm
1268 8.8 HIGH
Network
- - An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via injecting a crafted payload. CWE-611
XXE
CVE-2026-36765 2026-05-5 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
1269 8.8 HIGH
Network
- - An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary fi… CWE-22
Path Traversal
CVE-2026-36762 2026-05-5 03:16 2026-05-1 Show GitHub Exploit DB Packet Storm
1270 7.5 HIGH
Network
- - Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue. CWE-126
 Buffer Over-read
CVE-2026-34059 2026-05-5 03:16 2026-05-4 Show GitHub Exploit DB Packet Storm