Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199461	5.5	警告 Local	JasPer Project	-	JasPer の libjasper/jpc/jpc_dec.c の jpc_dec_tilefini 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-8882	2017-01-27 10:54	2016-10-20	Show	GitHub Exploit DB Packet Storm

199462	8.8	重要 Network	Liferay	-	Liferay Portal における任意のシェルコマンドを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-5327	2017-01-27 10:53	2010-01-15	Show	GitHub Exploit DB Packet Storm

199463	7.5	重要 Network	マイクロソフト日立	-	複数の Microsoft Windows 製品のローカルセキュリティ機関サブシステムサービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2017-0004	2017-01-27 10:43	2017-01-10	Show	GitHub Exploit DB Packet Storm

199464	7.5	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor の CliMonitorReportServlet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8207	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

199465	7.5	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor のサーブレット SoftwareImageUpload におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8206	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

199466	9.8	緊急 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor の DashboardFileReceiveServlet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8205	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

199467	9.8	緊急 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor の FileReceiveServlet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8204	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

199468	9.8	緊急 Network	Linux	-	SMMU システムコールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-8440	2017-01-27 10:14	2016-10-5	Show	GitHub Exploit DB Packet Storm

199469	9.8	緊急 Network	Linux	-	信頼ゾーンのアクセス制御の API におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-8439	2017-01-27 10:14	2016-10-5	Show	GitHub Exploit DB Packet Storm

199470	9.8	緊急 Network	Linux	-	ハイパーバイザの PIL における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2016-8438	2017-01-27 10:14	2016-10-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2371	7.3	HIGH Local	-	-	Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.	CWE-20 CWE-190 Improper Input Validation Integer Overflow or Wraparound	CVE-2026-35433	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2372	8.3	HIGH Network	-	-	Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.	CWE-862 Missing Authorization	CVE-2026-35438	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2373	8.8	HIGH Network	-	-	External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.	CWE-73 External Control of File Name or Path	CVE-2026-40370	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2374	9.3	CRITICAL Network	-	-	Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.	CWE-200 Information Exposure	CVE-2026-40379	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2375	7.8	HIGH Local	-	-	Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.	CWE-1390 Weak Authentication	CVE-2026-40417	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2376	7.2	HIGH Network	-	-	An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax. This issue affe…	CWE-77 Command Injection	CVE-2026-8431	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2377	9.9	CRITICAL Network	-	-	Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched user-owned objects witho…	CWE-284 Improper Access Control	CVE-2026-7813	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2378	4.8	MEDIUM Network	-	-	Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names (database, schema, table, column, etc.) were assigne…	CWE-79 Cross-site Scripting	CVE-2026-7814	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2379	8.8	HIGH Network	-	-	SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied JSON fields (buffer_usage_limit, vacuum_parallel, vacuum_index_cleanup, reindex_tablespace) were concatenated directly i…	CWE-89 SQL Injection	CVE-2026-7815	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

2380	8.8	HIGH Network	-	-	OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An aut…	CWE-89 SQL Injection	CVE-2026-7816	2026-05-14 00:34	2026-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed