Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199761 7.2 重要
Network 		dotCMS - dotCMS の Workflow Screen における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-4040 2016-04-27 16:34 2016-04-12 Show GitHub Exploit DB Packet Storm
199762 7.8 重要
Local 		Google - Android の rootdir/init.rc における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2420 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
199763 7.8 重要
Local 		Google - Android の System_server で使用される Skia の include/core/SkPostConfig.h における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2412 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
199764 5.3 警告
Network 		Magento, Inc. - Magento Enterprise Edition および Community Edition の app/code/core/Mage/Rss/Helper/Order.php における重要な注文情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-2212 2016-04-27 16:08 2016-02-23 Show GitHub Exploit DB Packet Storm
199765 8.1 重要
Network 		Drupal
Debian		 - Drupal の File モジュールにおけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-3162 2016-04-27 15:43 2016-02-24 Show GitHub Exploit DB Packet Storm
199766 8.1 重要
Network 		Apache Software Foundation - Apache Camel における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2015-5348 2016-04-27 15:26 2015-11-12 Show GitHub Exploit DB Packet Storm
199767 8.4 重要
Local 		NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおける重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-2558 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
199768 8.4 重要
Local 		NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおけるカーネルメモリから重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2557 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
199769 5.3 警告
Network 		OpenStack - OpenStack Compute の libvirt ドライバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2016-2140 2016-04-27 12:25 2016-03-8 Show GitHub Exploit DB Packet Storm
199770 6.2 警告
Local 		FreeBSD - FreeBSD の sys/amd64/amd64/sys_machdep.c の amd64_set_ldt 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー 		CVE-2016-1885 2016-04-27 11:52 2016-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
391 4.9 MEDIUM
Network 		- - Valtimo is an open-source business process automation platform. In versions 13.0.0 through 13.21.0, the InboxHandlingService logs the full content of every incoming inbox message at INFO level. Inbox… New CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-34164 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
392 - - - spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocat… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-35469 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
393 7.5 HIGH
Network 		- - ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack bu… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-40170 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
394 - - - free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for creating or updating Traffic Influence Subscriptions checks whether th… New CWE-285
CWE-636
Improper Authorization
 Not Failing Securely ('Failing Open') 		CVE-2026-40248 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
395 8.1 HIGH
Network 		- - sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c. New CWE-78
OS Command  		CVE-2026-41113 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
396 4.3 MEDIUM
Network 		- - Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id. New CWE-425
 Direct Request ('Forced Browsing') 		CVE-2024-58343 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
397 8.5 HIGH
Network 		- - SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and prior, the /api/av/removeUnusedAttributeView endpoint constructs a filesystem path using the user-controlled id pa… New CWE-24
 Path Traversal: '../filedir' 		CVE-2026-40318 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
398 8.6 HIGH
Network 		- - Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions … New CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-22734 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
399 - - - free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the PUT handler for updating Policy Data notification subscriptions at /nudr-dr/v2/pol… New CWE-636
CWE-754
 Not Failing Securely ('Failing Open')
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-40249 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
400 - - - My Calendar is a WordPress plugin for managing calendar events. In versions 3.7.6 and below, the mc_ajax_mcjs_action AJAX endpoint, registered for unauthenticated users, passes user-supplied argument… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-40308 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm