Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199741 3.1
Network
Debian
Canonical
Pidgin
- Pidgin の MXIT プロトコルにおける情報漏えいの脆弱性 CWE-125
CWE-200
CVE-2016-2380 2017-01-18 10:14 2016-06-21 Show GitHub Exploit DB Packet Storm
199742 4.4 警告
Local
マカフィー - Intel Security McAfee SIEM の Enterprise Security Manager および License Manager における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8006 2017-01-18 09:50 2016-09-16 Show GitHub Exploit DB Packet Storm
199743 5.5 警告
Local
サムスン - 特定の Samsung Android デバイスのソフトウェア Android OS の system_server プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-20
CVE-2017-5217 2017-01-17 18:02 2017-01-9 Show GitHub Exploit DB Packet Storm
199744 9.8 緊急
Network
Splunk - Splunk Enterprise の Splunk Web における HTTP リクエストインジェクション攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10126 2017-01-17 17:45 2016-11-10 Show GitHub Exploit DB Packet Storm
199745 8.6 重要
Network
Linux Containers - LXC におけるコンテナから脱出される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-10124 2017-01-17 17:34 2016-02-23 Show GitHub Exploit DB Packet Storm
199746 5.5 警告
Local
Netop - Netop Remote Control におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5216 2017-01-17 17:23 2017-01-9 Show GitHub Exploit DB Packet Storm
199747 8.8 重要
Network
GENEXIS - DRGOS を伴う Genexis デバイスの Parental Control パネルにおける任意の CLI コマンドを実行される脆弱性 CWE-77
コマンドインジェクション
CVE-2015-3441 2017-01-17 16:54 2015-04-20 Show GitHub Exploit DB Packet Storm
199748 7.5 重要
Network
MatrixSSL project - MatrixSSL の x509FreeExtensions 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
CWE-590
CVE-2016-6892 2017-01-17 16:07 2016-10-10 Show GitHub Exploit DB Packet Storm
199749 7.5 重要
Network
MatrixSSL project - MatrixSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-125
CVE-2016-6891 2017-01-17 16:07 2016-10-10 Show GitHub Exploit DB Packet Storm
199750 9.8 緊急
Network
MatrixSSL project - MatrixSSL におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
CWE-122
CVE-2016-6890 2017-01-17 16:06 2016-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2211 - - - Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, the GraphQL Address element resolver (src/gql/resolvers/elements/Address.php) performs no schema scope filteri… CWE-862
 Missing Authorization
CVE-2026-44010 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2212 9.9 CRITICAL
Network
- - wger is a free, open-source workout and fitness manager. Prior to 2.6, the reset_user_password and gym_permissions_user_edit views in wger perform a gym-scope authorization check using Python object … CWE-863
 Incorrect Authorization
CVE-2026-43948 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2213 6.8 MEDIUM
Network
bx33661 wireshark_mcp Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_expor… CWE-22
Path Traversal
CVE-2026-43901 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
2214 7.7 HIGH
Network
- - Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscriptions/subscriptions.ts exhibits a broken aut… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-43890 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
2215 4.3 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, the unauthenticated plugin/Scheduler/downloadICS.php endpoint passes attacker-controlled title, description, and jo… CWE-93
CRLF Injection
CVE-2026-43882 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
2216 6.4 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySubscribers.json.php takes the raw message POST parameter and passes it into sendSiteEmail(), which s… CWE-79
Cross-site Scripting
CVE-2026-43876 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
2217 - - - In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status LUO keeps track of successful retrieve attempts on a LUO file. It does so to av… - CVE-2026-43489 2026-05-14 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm
2218 - - - In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controller error (HCE) The xHCI controller reports a Host Controller Error (HCE) in UA… - CVE-2026-43488 2026-05-14 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm
2219 - - - In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102 According to a user report, the ST1000DM010-2EP102 has problems with LPM, cau… - CVE-2026-43487 2026-05-14 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm
2220 - - - In the Linux kernel, the following vulnerability has been resolved: arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults contpte_ptep_set_access_flags() compared the gathered ptep… - CVE-2026-43486 2026-05-14 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm