Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199771 7.5 重要
Network 		OpenStack
レッドハット		 - TripleO Heat templates におけるプライベートコンテナから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-5271 2016-04-27 11:36 2015-09-11 Show GitHub Exploit DB Packet Storm
199772 8.1 重要
Network 		openSUSE project
SaltStack		 - Salt における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-1866 2016-04-27 11:29 2016-01-25 Show GitHub Exploit DB Packet Storm
199773 2 低
Physics 		GNU Project
Debian
Canonical		 - Libgcrypt における楕円曲線ディフィー・ヘルマン鍵を抽出される脆弱性 CWE-200
情報漏えい 		CVE-2015-7511 2016-04-27 10:56 2015-09-29 Show GitHub Exploit DB Packet Storm
199774 5.6 警告
Network 		ネットムーブ株式会社 - SaAT Netizen にダウンロードファイル検証不備の脆弱性 - CVE-2016-1203 2016-04-27 10:41 2016-04-26 Show GitHub Exploit DB Packet Storm
199775 6.2 警告
Local 		Apache Software Foundation - Apache Hadoop における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-1776 2016-04-27 10:15 2015-02-17 Show GitHub Exploit DB Packet Storm
199776 8.8 重要
Network 		Debian
openSUSE project
Canonical
xdelta		 - xdelta3 の xdelta3-main.h の main_get_appheader 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-9765 2016-04-27 10:02 2014-10-12 Show GitHub Exploit DB Packet Storm
199777 5.5 警告
Local 		Google - Android の Exchange ActiveSync の Autodiscover の実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-2415 2016-04-27 09:52 2016-04-4 Show GitHub Exploit DB Packet Storm
199778 6.2 警告
Local 		Google - Android の Minikin ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-2414 2016-04-27 09:52 2016-04-4 Show GitHub Exploit DB Packet Storm
199779 7.8 重要
Local 		Google - Android のメディアサーバの media/libmedia/IOMX.cpp における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2413 2016-04-27 09:52 2016-04-4 Show GitHub Exploit DB Packet Storm
199780 8.1 重要
Network 		Google - Android の Texas Instruments ハプティクスカーネルドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2409 2016-04-27 09:52 2016-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
391 4.9 MEDIUM
Network 		- - Valtimo is an open-source business process automation platform. In versions 13.0.0 through 13.21.0, the InboxHandlingService logs the full content of every incoming inbox message at INFO level. Inbox… New CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-34164 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
392 - - - spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocat… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-35469 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
393 7.5 HIGH
Network 		- - ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack bu… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-40170 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
394 - - - free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the handler for creating or updating Traffic Influence Subscriptions checks whether th… New CWE-285
CWE-636
Improper Authorization
 Not Failing Securely ('Failing Open') 		CVE-2026-40248 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
395 8.1 HIGH
Network 		- - sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c. New CWE-78
OS Command  		CVE-2026-41113 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
396 4.3 MEDIUM
Network 		- - Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id. New CWE-425
 Direct Request ('Forced Browsing') 		CVE-2024-58343 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
397 8.5 HIGH
Network 		- - SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and prior, the /api/av/removeUnusedAttributeView endpoint constructs a filesystem path using the user-controlled id pa… New CWE-24
 Path Traversal: '../filedir' 		CVE-2026-40318 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
398 8.6 HIGH
Network 		- - Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This vulnerability exists when SAML 2.0 bearer assertions … New CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-22734 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
399 - - - free5GC is an open-source implementation of the 5G core network. In versions 4.2.1 and below of the UDR service, the PUT handler for updating Policy Data notification subscriptions at /nudr-dr/v2/pol… New CWE-636
CWE-754
 Not Failing Securely ('Failing Open')
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-40249 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm
400 - - - My Calendar is a WordPress plugin for managing calendar events. In versions 3.7.6 and below, the mc_ajax_mcjs_action AJAX endpoint, registered for unauthenticated users, passes user-supplied argument… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-40308 2026-04-18 00:38 2026-04-17 Show GitHub Exploit DB Packet Storm