Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199451 7.8 重要
Local
libbpg - Libbpg ライブラリの BPG 画像の復号化におけるヒープ境界外への書き込みを行う脆弱性 CWE-787
境界外書き込み
CVE-2016-8710 2017-02-10 10:34 2016-10-17 Show GitHub Exploit DB Packet Storm
199452 7.8 重要
Local
Lenovo - Windows を稼動する複数の Lenovo システムで使用される Lenovo Transition における権限を昇格される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-8227 2017-02-10 10:09 2016-12-29 Show GitHub Exploit DB Packet Storm
199453 4.9 警告
Network
Lenovo - 複数の Lenovo System 製品の BIOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-19
データ処理
CVE-2016-8226 2017-02-10 10:09 2016-12-15 Show GitHub Exploit DB Packet Storm
199454 7.8 重要
Local
Lenovo - Lenovo Edge および Lenovo Slim USB キーボード ドライバーにおける昇格された権限でコードを実行される脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2016-8225 2017-02-10 10:09 2016-12-15 Show GitHub Exploit DB Packet Storm
199455 9.8 緊急
Network
Aerospike, Inc. - Aerospike Database Server のクエリ機能の as_sindex__simatch_list_by_set_binid 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-9054 2017-02-9 18:44 2016-10-26 Show GitHub Exploit DB Packet Storm
199456 9.8 緊急
Network
Aerospike, Inc. - Aerospike Database Server のクエリ機能の as_sindex__simatch_by_iname 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-9052 2017-02-9 18:44 2016-10-26 Show GitHub Exploit DB Packet Storm
199457 8.2 重要
Network
Aerospike, Inc. - Aerospike Database Server のクライアントメッセージの構文解析機能における境界外読み取りの脆弱性 CWE-125
境界外読み取り
CVE-2016-9050 2017-02-9 18:44 2016-10-26 Show GitHub Exploit DB Packet Storm
199458 6.1 警告
Network
eClinicalWorks - eClinicalWorks Patient Portal の raceMasterList.jsp における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5599 2017-02-9 18:23 2017-01-27 Show GitHub Exploit DB Packet Storm
199459 7.5 重要
Network
eClinicalWorks - eClinicalWorks healow@work の EmployeePortalServlet におけるブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5598 2017-02-9 18:22 2017-01-27 Show GitHub Exploit DB Packet Storm
199460 6.1 警告
Network
Opera Software ASA - Android 用 Opera における URL を偽装される脆弱性 CWE-601
オープンリダイレクト
CVE-2016-6908 2017-02-9 18:21 2016-08-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2771 - - - A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7. The web management interface invokes the backend helper /usr/sbin/pappiw and passes user-controlled parameters … - CVE-2026-36827 2026-05-20 03:04 2026-05-20 Show GitHub Exploit DB Packet Storm
2772 - - - A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7. The CGI component allows authenticated users to execute arbitrary shell… - CVE-2026-36828 2026-05-20 03:04 2026-05-20 Show GitHub Exploit DB Packet Storm
2773 - - - In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information.  … CWE-209
Information Exposure Through an Error Message
CVE-2026-5511 2026-05-20 02:59 2026-05-20 Show GitHub Exploit DB Packet Storm
2774 7.5 HIGH
Network
- - HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address… CWE-348
 Use of Less Trusted Source
CVE-2026-43634 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
2775 7.5 HIGH
Network
- - Funnel Builder for WooCommerce Checkout prior to 3.15.0.3 contains a missing authorization vulnerability in the public checkout endpoint that allows unauthenticated attackers to invoke internal metho… CWE-862
 Missing Authorization
CVE-2026-47100 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
2776 9.8 CRITICAL
Network
- - Tyler Identity Local (TID-L) uses documented, default administrative credentials. Users are not required to change the credentials before deployment. TID-L has not been distributed since December 202… CWE-1392
 Use of Default Credentials
CVE-2026-44159 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
2777 5.8 MEDIUM
Network
- - Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network tr… CWE-405
CWE-406
CWE-770
 Asymmetric Resource Consumption (Amplification)
 Insufficient Control of Network Message Volume (Network Amplification)
 Allocation of Resources Without Limits or Throttling
CVE-2026-45557 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
2778 8.4 HIGH
Local
- - An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external … - CVE-2026-5804 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
2779 5.0 MEDIUM
Network
mattermost mattermost_server Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an authenticated attacker to redirect… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-6333 2026-05-20 02:51 2026-05-18 Show GitHub Exploit DB Packet Storm
2780 4.8 MEDIUM
Network
nozominetworks cmc
guardian
A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges ca… CWE-79
Cross-site Scripting
CVE-2025-40901 2026-05-20 02:47 2026-05-19 Show GitHub Exploit DB Packet Storm