Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199761 7.2 重要
Network
dotCMS - dotCMS の Workflow Screen における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-4040 2016-04-27 16:34 2016-04-12 Show GitHub Exploit DB Packet Storm
199762 7.8 重要
Local
Google - Android の rootdir/init.rc における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2420 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
199763 7.8 重要
Local
Google - Android の System_server で使用される Skia の include/core/SkPostConfig.h における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2412 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
199764 5.3 警告
Network
Magento, Inc. - Magento Enterprise Edition および Community Edition の app/code/core/Mage/Rss/Helper/Order.php における重要な注文情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2212 2016-04-27 16:08 2016-02-23 Show GitHub Exploit DB Packet Storm
199765 8.1 重要
Network
Drupal
Debian
- Drupal の File モジュールにおけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-3162 2016-04-27 15:43 2016-02-24 Show GitHub Exploit DB Packet Storm
199766 8.1 重要
Network
Apache Software Foundation - Apache Camel における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2015-5348 2016-04-27 15:26 2015-11-12 Show GitHub Exploit DB Packet Storm
199767 8.4 重要
Local
NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおける重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-2558 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
199768 8.4 重要
Local
NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおけるカーネルメモリから重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2557 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
199769 5.3 警告
Network
OpenStack - OpenStack Compute の libvirt ドライバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-2140 2016-04-27 12:25 2016-03-8 Show GitHub Exploit DB Packet Storm
199770 6.2 警告
Local
FreeBSD - FreeBSD の sys/amd64/amd64/sys_machdep.c の amd64_set_ldt 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-1885 2016-04-27 11:52 2016-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1011 5.5 MEDIUM
Local
- - A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected devi… CWE-59
Link Following
CVE-2026-20161 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1012 9.8 CRITICAL
Network
- - A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. … CWE-295
Improper Certificate Validation 
CVE-2026-20184 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1013 5.3 MEDIUM
Network
- - A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirem… CWE-305
 Authentication Bypass by Primary Weakness
CVE-2026-20152 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1014 6.1 MEDIUM
Network
- - A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed th… CWE-80
Basic XSS
CVE-2026-20170 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1015 9.9 CRITICAL
Network
- - A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploi… CWE-22
Path Traversal
CVE-2026-20180 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1016 9.9 CRITICAL
Network
- - A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploi… CWE-77
Command Injection
CVE-2026-20186 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1017 8.2 HIGH
Local
- - Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. A low-privileged l… CWE-427
 Uncontrolled Search Path Element
CVE-2026-34632 2026-04-18 00:08 2026-04-16 Show GitHub Exploit DB Packet Storm
1018 8.1 HIGH
Network
- - An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulne… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-3605 2026-04-18 00:08 2026-04-17 Show GitHub Exploit DB Packet Storm
1019 7.5 HIGH
Network
- - If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin bac… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-4525 2026-04-18 00:08 2026-04-17 Show GitHub Exploit DB Packet Storm
1020 5.3 MEDIUM
Network
- - Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially lea… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-5052 2026-04-18 00:08 2026-04-17 Show GitHub Exploit DB Packet Storm