Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199181 7.8 重要
Local
The Go Project - Windows 上で稼動する Go における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3958 2016-05-27 15:54 2016-04-2 Show GitHub Exploit DB Packet Storm
199182 7.4 重要
Network
トレンドマイクロ - Apple iOS 用 Trend Micro Mobile Security におけるモバイルアプリケーションのログインサーバになりすまされる脆弱性 CWE-200
情報漏えい
CVE-2016-3664 2016-05-27 15:03 2016-04-22 Show GitHub Exploit DB Packet Storm
199183 6.3 警告
Network
エヌ・ティ・ティ・ブロードバンドプラットフォーム株式会社 - Japan Connected-free Wi-Fi におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5629 2016-05-27 12:12 2015-09-11 Show GitHub Exploit DB Packet Storm
199184 7.5 重要
Adjacent
Huawei - 複数の Huawei デバイス製品のソフトウェアの Smart DNS 機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4577 2016-05-27 11:23 2016-05-11 Show GitHub Exploit DB Packet Storm
199185 9.8 緊急
Network
Huawei - 複数の Huawei デバイス製品のソフトウェアの Application Specific Packet Filtering 機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4576 2016-05-27 11:23 2016-05-11 Show GitHub Exploit DB Packet Storm
199186 8.1 重要
Network
Huawei - Huawei S12700 および S5700 スイッチのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4087 2016-05-27 11:23 2016-04-27 Show GitHub Exploit DB Packet Storm
199187 7.8 重要
Local
Huawei - Huawei Mobile Broadband HL Service における SYSTEM 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2855 2016-05-27 11:23 2016-05-12 Show GitHub Exploit DB Packet Storm
199188 4.4 警告
Local
Fabrice Bellard
Fedora Project
- QEMU の hw/usb/hcd-ehci.c の ehci_advance_state 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4037 2016-05-27 10:08 2016-04-19 Show GitHub Exploit DB Packet Storm
199189 6.5 警告
Local
Fabrice Bellard - QEMU の hw/i386/kvmvapic.c の patch_instruction 関数におけるホストスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-4020 2016-05-27 10:08 2016-05-23 Show GitHub Exploit DB Packet Storm
199190 5.9 警告
Network
Fabrice Bellard
Fedora Project
- QEMU の hw/net/stellaris_enet.c の stellaris_enet_receive 関数におけるバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-4001 2016-05-27 10:08 2016-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
441 6.1 MEDIUM
Local
- - melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, an attacker who can influence a melange configuration file — for exampl… New CWE-22
Path Traversal
CVE-2026-29050 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
442 4.4 MEDIUM
Local
- - melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, `melange lint --persist-lint-results` (opt-in flag, also usable via `me… New CWE-22
Path Traversal
CVE-2026-29051 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
443 7.6 HIGH
Network
- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 through 4.4.0 have an SQL injection vulnerability in the API rou… New CWE-89
CWE-184
SQL Injection
 Incomplete Blacklist
CVE-2026-31952 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
444 5.3 MEDIUM
Network
- - go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash a… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-32952 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
445 - - - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the haproxy_section_save interface presents a vulnerability that could lead to remote … New CWE-22
Path Traversal
CVE-2026-33076 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
446 - - - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 8.2.6.4 have a SQL injection vulnerability in the haproxy_section_save function in app/routes/… New CWE-89
SQL Injection
CVE-2026-33078 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
447 6.4 MEDIUM
Network
- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Site Scripting (XSS) vulnerability in versions prior to 4.4.1 … New CWE-79
Cross-site Scripting
CVE-2026-31953 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
448 4.9 MEDIUM
Network
- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery (SSRF) vulnerability in versions… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-31955 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
449 4.3 MEDIUM
Network
- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4.4.1, any authenticated user can manually construct a URL t… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-31956 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
450 - - - Kirby is an open-source content management system. Kirby's `Xml::value()` method has special handling for `<![CDATA[ ]]>` blocks. If the input value is already valid `CDATA`, it is not escaped a seco… New CWE-91
Blind XPath Injection
CVE-2026-32870 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm