Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199681	4	警告	MySQL AB openSUSE project Canonical Debian MariaDB Corporation Ab. オラクルレッドハット	-	Oracle MySQL の MySQL Server および MariaDB における Optimizer に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0597	2016-12-27 09:49	2016-01-19	Show	GitHub Exploit DB Packet Storm

199682	4	警告	MySQL AB openSUSE project Canonical Debian MariaDB Corporation Ab. オラクルレッドハット	-	Oracle MySQL の MySQL Server および MariaDB における DML に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0596	2016-12-27 09:49	2016-01-19	Show	GitHub Exploit DB Packet Storm

199683	7.2	危険	MySQL AB openSUSE project Canonical Debian MariaDB Corporation Ab. オラクルレッドハット	-	Oracle MySQL の MySQL Server および MariaDB における Client に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0546	2016-12-27 09:49	2016-01-19	Show	GitHub Exploit DB Packet Storm

199684	6.8	警告	MySQL AB openSUSE project Canonical Debian MariaDB Corporation Ab. オラクルレッドハット	-	Oracle MySQL の MySQL Server および MariaDB における Options に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0505	2016-12-27 09:49	2016-01-19	Show	GitHub Exploit DB Packet Storm

199685	5.5	警告 Local	wolfSSL Inc. MariaDB Corporation Ab. オラクル	-	wolfSSL の AES 暗号および復号の C ソフトウェアの実装における AES 鍵を取得される脆弱性	CWE-310 暗号の問題	CVE-2016-7440	2016-12-27 09:47	2016-09-26	Show	GitHub Exploit DB Packet Storm

199686	9.8	緊急 Network	サムスン	-	Samsung Note デバイスのソフトウェアの Telecom アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-388 エラー処理	CVE-2016-9967	2016-12-26 17:46	2016-09-13	Show	GitHub Exploit DB Packet Storm

199687	9.8	緊急 Network	サムスン	-	Samsung Note デバイスのソフトウェアの Telecom アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-388 エラー処理	CVE-2016-9966	2016-12-26 17:46	2016-09-13	Show	GitHub Exploit DB Packet Storm

199688	9.8	緊急 Network	サムスン	-	Samsung Note デバイスのソフトウェアの Telecom アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-388 エラー処理	CVE-2016-9965	2016-12-26 17:46	2016-09-13	Show	GitHub Exploit DB Packet Storm

199689	7.5	重要 Network	Joomla!	-	Joomla! の components/com_users/models/registration.php における登録されたユーザアカウントへのアクセス権を取得される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-9838	2016-12-26 17:37	2016-12-13	Show	GitHub Exploit DB Packet Storm

199690	7.5	重要 Network	Joomla!	-	Joomla! の templates/beez3/html/com_content/article/default.php における一般にアクセスできない記事を閲覧される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9837	2016-12-26 17:37	2016-12-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2081	7.2	HIGH Network	-	-	A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacke…	CWE-77 Command Injection	CVE-2026-23823	2026-05-14 00:35	2026-05-13	Show	GitHub Exploit DB Packet Storm

2082	9.1	CRITICAL Network	-	-	Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data…	-	CVE-2025-11159	2026-05-14 00:35	2026-05-13	Show	GitHub Exploit DB Packet Storm

2083	4.3	MEDIUM Network	-	-	A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to ce…	CWE-36 Absolute Path Traversal	CVE-2026-32175	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2084	7.3	HIGH Local	-	-	Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.	CWE-20 CWE-122 Improper Input Validation Heap-based Buffer Overflow	CVE-2026-32177	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2085	7.8	HIGH Local	-	-	External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.	CWE-73 External Control of File Name or Path	CVE-2026-32204	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2086	8.2	HIGH Network	-	-	Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.	CWE-74 Injection	CVE-2026-33833	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2087	7.3	HIGH Local	-	-	Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.	CWE-20 CWE-190 Improper Input Validation Integer Overflow or Wraparound	CVE-2026-35433	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2088	8.3	HIGH Network	-	-	Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.	CWE-862 Missing Authorization	CVE-2026-35438	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2089	8.8	HIGH Network	-	-	External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.	CWE-73 External Control of File Name or Path	CVE-2026-40370	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

2090	9.3	CRITICAL Network	-	-	Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.	CWE-200 Information Exposure	CVE-2026-40379	2026-05-14 00:34	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed