Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199941 4.3 警告
Network
日立
オラクル
- Oracle Java SE および Java SE Embedded における JMX に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5554 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
199942 3.1
Network
日立
オラクル
- Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5542 2016-11-9 16:40 2016-10-18 Show GitHub Exploit DB Packet Storm
199943 2.6 注意 日本電気
Apache Software Foundation
オラクル
- Apache Tomcat の AsyncContextImpl.java における重要なリクエスト情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-2071 2016-11-9 16:39 2013-05-9 Show GitHub Exploit DB Packet Storm
199944 8.1 重要
Network
レッドハット
日本電気
Fedora Project
The Go Project
- Go の net/http パッケージにおける任意のプロキシサーバに CGI アプリケーションのアウトバウンド HTTP トラフィックをリダイレクトされる脆弱性 CWE-Other
CWE-Other
CVE-2016-5386 2016-11-9 16:35 2016-07-18 Show GitHub Exploit DB Packet Storm
199945 - - Claybird
寺尾 進
日本電気
Micco
アップル
Schezo
Lunascape
pon software
フェンリル株式会社
- Windows プログラムの DLL 読み込みに脆弱性 - - 2016-11-9 16:25 2010-08-26 Show GitHub Exploit DB Packet Storm
199946 2.6 注意 日本電気
OpenSSL Project
オラクル
- OpenSSL の s3_srvr.c の ssl3_get_client_key_exchange 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-1787 2016-11-9 15:45 2015-03-19 Show GitHub Exploit DB Packet Storm
199947 5 警告 アップル
日本電気
OpenSSL Project
日立
オラクル
- OpenSSL の SSLv2 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-0293 2016-11-9 15:45 2015-03-19 Show GitHub Exploit DB Packet Storm
199948 7.5 危険 日本電気
OpenSSL Project
日立
オラクル
- OpenSSL の base64-decoding の実装の crypto/evp/encode.c における整数アンダーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-0292 2016-11-9 15:45 2015-03-19 Show GitHub Exploit DB Packet Storm
199949 5 警告 日本電気
OpenSSL Project
オラクル
- OpenSSL の t1_lib.c の sigalgs 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-0291 2016-11-9 15:45 2015-03-19 Show GitHub Exploit DB Packet Storm
199950 5 警告 日本電気
OpenSSL Project
オラクル
- AES-NI をサポートする 64-bit x86 プラットフォーム上で稼動する OpenSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-0290 2016-11-9 15:45 2015-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1401 8.8 HIGH
Network
- - Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management. Prior to 1.0.0-beta.15, an insecure direct… Update CWE-863
 Incorrect Authorization
CVE-2026-42843 2026-05-14 01:04 2026-05-12 Show GitHub Exploit DB Packet Storm
1402 - - - pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(… Update CWE-195
CWE-918
 Signed to Unsigned Conversion Error
Server-Side Request Forgery (SSRF) 
CVE-2026-41682 2026-05-14 01:01 2026-05-9 Show GitHub Exploit DB Packet Storm
1403 10.0 CRITICAL
Network
- - openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3, when openvpn-auth… Update CWE-287
Improper Authentication
CVE-2026-41070 2026-05-14 01:00 2026-05-9 Show GitHub Exploit DB Packet Storm
1404 9.1 CRITICAL
Network
- - Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulne… Update CWE-290
 Authentication Bypass by Spoofing
CVE-2026-42354 2026-05-14 00:59 2026-05-9 Show GitHub Exploit DB Packet Storm
1405 10.0 CRITICAL
Network
- - Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker-build.yml) allows a… Update CWE-94
Code Injection
CVE-2026-42298 2026-05-14 00:58 2026-05-9 Show GitHub Exploit DB Packet Storm
1406 6.5 MEDIUM
Network
- - Postiz is an AI social media scheduling tool. From version 2.16.6 to before version 2.21.7, all SSRF protections added in v2.21.4–v2.21.6 share a fundamental TOCTOU (Time-of-Check-Time-of-Use) vulner… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42346 2026-05-14 00:58 2026-05-9 Show GitHub Exploit DB Packet Storm
1407 8.9 HIGH
Network
- - Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their ow… Update CWE-79
Cross-site Scripting
CVE-2026-42556 2026-05-14 00:58 2026-05-9 Show GitHub Exploit DB Packet Storm
1408 - - - Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P… Update CWE-79
Cross-site Scripting
CVE-2026-42794 2026-05-14 00:57 2026-05-9 Show GitHub Exploit DB Packet Storm
1409 - - - Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled Gra… Update CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-42793 2026-05-14 00:57 2026-05-9 Show GitHub Exploit DB Packet Storm
1410 - - - Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum… Update CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-43967 2026-05-14 00:57 2026-05-9 Show GitHub Exploit DB Packet Storm