Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199801 6.5 警告
Network 		OpenJPEG project - OpenJPEG の convert.c:2226(jp2) の imagetopnm におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-9116 2016-11-2 15:26 2016-10-29 Show GitHub Exploit DB Packet Storm
199802 6.5 警告
Network 		OpenJPEG project - OpenJPEG の convert.c(jp2):942 の imagetotga におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-9115 2016-11-2 15:26 2016-10-29 Show GitHub Exploit DB Packet Storm
199803 7.5 重要
Network 		OpenJPEG project - OpenJPEG の convert.c:1943(jp2) の imagetopnm におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-9114 2016-11-2 15:26 2016-10-29 Show GitHub Exploit DB Packet Storm
199804 7.5 重要
Network 		OpenJPEG project - OpenJPEG の convertbmp.c:980 の imagetobmp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-9113 2016-11-2 15:26 2016-10-29 Show GitHub Exploit DB Packet Storm
199805 7.5 重要
Network 		OpenJPEG project - OpenJPEG の openjp2/pi.c:523 の opj_pi_next_cprl 関数における浮動小数点例外の脆弱性 CWE-Other
その他 		CVE-2016-9112 2016-11-2 15:26 2016-10-27 Show GitHub Exploit DB Packet Storm
199806 7.8 重要
Local 		OpenJPEG project - OpenJPEG ライブラリの JPEG2000 画像ファイル形式パーサにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-8332 2016-11-2 15:26 2016-09-29 Show GitHub Exploit DB Packet Storm
199807 6.1 警告
Network 		AlienVault - AlienVault OSSIM および USM の脆弱性検査スケジューラの複数の GET パラメータにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-8583 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
199808 9.8 緊急
Network 		AlienVault - AlienVault OSSIM および USM の gauge.php における任意の SQL クエリを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2016-8582 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
199809 6.1 警告
Network 		AlienVault - AlienVault OSSIM および USM のログインプロセスの User-Agent ヘッダにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-8581 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
199810 9.8 緊急
Network 		AlienVault - AlienVault OSSIM および USM の複数のウィジェットファイルにおける PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2016-8580 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1451 8.8 HIGH
Network 		anthropic claude_code In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious reposi… Update CWE-20
CWE-77
NVD-CWE-noinfo
 Improper Input Validation 
Command Injection 		CVE-2026-40068 2026-05-13 01:21 2026-05-6 Show GitHub Exploit DB Packet Storm
1452 6.5 MEDIUM
Network 		langgenius dify Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplyin… Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-41950 2026-05-13 01:20 2026-05-6 Show GitHub Exploit DB Packet Storm
1453 7.5 HIGH
Network 		openmrs openmrs OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnera… Update CWE-22
Path Traversal 		CVE-2026-40075 2026-05-13 01:18 2026-05-6 Show GitHub Exploit DB Packet Storm
1454 6.5 MEDIUM
Network 		getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Content Editor with only pages.update permissions) can bypass the existing Twig sandbox restrictions by utilizing … Update CWE-863
 Incorrect Authorization 		CVE-2026-42610 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1455 8.9 HIGH
Network 		getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the ability to create a page) user can cause XSS with the injection of svg element. The XSS can further be escalated t… Update CWE-79
Cross-site Scripting 		CVE-2026-42611 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1456 5.4 MEDIUM
Network 		getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/grav allows publisher-level accounts to execute arbitrary JavaScript. The issue … Update CWE-79
Cross-site Scripting 		CVE-2026-42612 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1457 4.8 MEDIUM
Network 		getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an executable JavaScript event-handler attribute into rendered image HTML thro… Update CWE-79
Cross-site Scripting 		CVE-2026-42841 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1458 6.5 MEDIUM
Local 		linuxcontainers lxc lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network … Update CWE-863
 Incorrect Authorization 		CVE-2026-39402 2026-05-13 01:12 2026-05-6 Show GitHub Exploit DB Packet Storm
1459 5.3 MEDIUM
Network 		torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and Images API incorrectly listed items in private collections. A user with access t… Update CWE-280
Improper Handling of Insufficient Permissions or Privileges  		CVE-2026-44201 2026-05-13 00:59 2026-05-12 Show GitHub Exploit DB Packet Storm
1460 6.5 MEDIUM
Network 		torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the page through the revis… Update CWE-280
Improper Handling of Insufficient Permissions or Privileges  		CVE-2026-44197 2026-05-13 00:58 2026-05-12 Show GitHub Exploit DB Packet Storm