Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199871 7.8 重要
Local
オラクル - Oracle Berkeley DB の DataStore における脆弱性 CWE-noinfo
情報不足
CVE-2016-0682 2016-04-25 14:38 2016-04-19 Show GitHub Exploit DB Packet Storm
199872 6.7 警告
Local
オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0678 2016-04-25 11:41 2016-04-19 Show GitHub Exploit DB Packet Storm
199873 7.8 重要
Local
latex2rtf project
Fedora Project
- latex2rtf の funct1.c の CmdKeywords 関数におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2015-8106 2016-04-25 10:25 2015-11-19 Show GitHub Exploit DB Packet Storm
199874 7.8 重要
Local
openSUSE project - gdk-pixbuf の gdk-pixbuf-scale.c の gdk_pixbuf_flip 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-7552 2016-04-25 10:22 2015-12-14 Show GitHub Exploit DB Packet Storm
199875 5.5 警告
Local
VideoLAN
Canonical
- VideoLAN VLC media player の input/stream.c の AStreamPeekStream 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3941 2016-04-25 10:16 2016-04-12 Show GitHub Exploit DB Packet Storm
199876 6.1 警告
Network
Google - Google Chrome の拡張サブシステムの extensions/renderer/module_system.cc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1652 2016-04-25 10:14 2016-04-13 Show GitHub Exploit DB Packet Storm
199877 2.7
Network
dotCMS - dotCMS の dotTailLogServlet におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-3972 2016-04-25 10:12 2016-04-11 Show GitHub Exploit DB Packet Storm
199878 5.4 警告
Network
dotCMS - dotCMS の lucene_search.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3971 2016-04-25 10:12 2016-04-11 Show GitHub Exploit DB Packet Storm
199879 7.5 重要
Network
Fedora Project
Libreswan Project
- Libreswan におけるにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-310
CVE-2016-3071 2016-04-25 10:08 2016-04-4 Show GitHub Exploit DB Packet Storm
199880 7.8 重要
Local
Panda Security - Windows 用 Panda Security for Business 製品で使用される Panda Endpoint Administration Agent におけるシステム権限を取得される脆弱性 CWE-Other
その他
CVE-2016-3943 2016-04-25 10:03 2016-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1011 5.5 MEDIUM
Local
- - A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected devi… CWE-59
Link Following
CVE-2026-20161 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1012 9.8 CRITICAL
Network
- - A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. … CWE-295
Improper Certificate Validation 
CVE-2026-20184 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1013 5.3 MEDIUM
Network
- - A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirem… CWE-305
 Authentication Bypass by Primary Weakness
CVE-2026-20152 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1014 6.1 MEDIUM
Network
- - A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed th… CWE-80
Basic XSS
CVE-2026-20170 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1015 9.9 CRITICAL
Network
- - A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploi… CWE-22
Path Traversal
CVE-2026-20180 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1016 9.9 CRITICAL
Network
- - A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploi… CWE-77
Command Injection
CVE-2026-20186 2026-04-18 00:09 2026-04-16 Show GitHub Exploit DB Packet Storm
1017 8.2 HIGH
Local
- - Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. A low-privileged l… CWE-427
 Uncontrolled Search Path Element
CVE-2026-34632 2026-04-18 00:08 2026-04-16 Show GitHub Exploit DB Packet Storm
1018 8.1 HIGH
Network
- - An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulne… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-3605 2026-04-18 00:08 2026-04-17 Show GitHub Exploit DB Packet Storm
1019 7.5 HIGH
Network
- - If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin bac… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-4525 2026-04-18 00:08 2026-04-17 Show GitHub Exploit DB Packet Storm
1020 5.3 MEDIUM
Network
- - Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially lea… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-5052 2026-04-18 00:08 2026-04-17 Show GitHub Exploit DB Packet Storm