Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200001 4.3 警告
Network
F5 Networks - 複数の F5 BIG-IP 製品の Configuration ユーティリティにおけるファイルをアップロードされる脆弱性 CWE-Other
その他
CVE-2015-8021 2016-04-19 11:56 2015-10-28 Show GitHub Exploit DB Packet Storm
200002 8.8 重要
Network
マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-1015 2016-04-19 10:36 2016-04-7 Show GitHub Exploit DB Packet Storm
200003 9.8 緊急
Network
マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player における ASLR 保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-1006 2016-04-19 10:36 2016-04-7 Show GitHub Exploit DB Packet Storm
200004 5.3 警告
Network
Drupal
Debian
- Drupal の User モジュールの "have you forgotten your password" のリンクにおける重要なユーザ名情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-3170 2016-04-18 18:07 2016-02-24 Show GitHub Exploit DB Packet Storm
200005 6.4 警告
Network
Drupal
Debian
- Drupal の System モジュールにおけるサイト管理者の認証をハイジャックされる脆弱性 CWE-Other
その他
CVE-2016-3168 2016-04-18 18:07 2016-02-24 Show GitHub Exploit DB Packet Storm
200006 7.3 重要
Network
Prepopulate project - Drupal 用 Prepopulate モジュールの _prepopulate_request_walk 関数における特定のフィールドの型を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3188 2016-04-18 17:56 2016-03-2 Show GitHub Exploit DB Packet Storm
200007 7.3 重要
Network
Prepopulate project - Drupal 用 Prepopulate モジュールにおける REQUEST スーパーグローバル変数の配列を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3187 2016-04-18 17:56 2016-03-2 Show GitHub Exploit DB Packet Storm
200008 7.5 重要
Network
Apache Software Foundation - Apache Jetspeed の User Manager サービスにおけるユーザを追加される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2171 2016-04-18 17:37 2016-03-28 Show GitHub Exploit DB Packet Storm
200009 9.8 緊急
Network
Apache Software Foundation - Apache OFBiz における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-2170 2016-04-18 17:37 2016-04-5 Show GitHub Exploit DB Packet Storm
200010 6.5 警告
Network
Apache Software Foundation - Apache Qpid Proton の複数のクラスにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2166 2016-04-18 17:37 2016-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
341 7.8 HIGH
Local
adobe framemaker Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. … New CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-27297 2026-04-16 02:37 2026-04-15 Show GitHub Exploit DB Packet Storm
342 7.8 HIGH
Local
adobe framemaker Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the contex… New CWE-843
Type Confusion
CVE-2026-27298 2026-04-16 02:36 2026-04-15 Show GitHub Exploit DB Packet Storm
343 6.3 MEDIUM
Local
adobe framemaker Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to… New CWE-20
 Improper Input Validation 
CVE-2026-27299 2026-04-16 02:36 2026-04-15 Show GitHub Exploit DB Packet Storm
344 5.5 MEDIUM
Local
adobe framemaker Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disc… New CWE-824
 Access of Uninitialized Pointer
CVE-2026-27300 2026-04-16 02:35 2026-04-15 Show GitHub Exploit DB Packet Storm
345 5.5 MEDIUM
Local
adobe framemaker Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose s… New CWE-122
Heap-based Buffer Overflow
CVE-2026-27301 2026-04-16 02:33 2026-04-15 Show GitHub Exploit DB Packet Storm
346 8.1 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-level session termin… New CWE-863
 Incorrect Authorization
CVE-2026-34512 2026-04-16 02:23 2026-04-10 Show GitHub Exploit DB Packet Storm
347 5.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider signature checks. Attackers can send… New CWE-405
 Asymmetric Resource Consumption (Amplification)
CVE-2026-35626 2026-04-16 02:22 2026-04-10 Show GitHub Exploit DB Packet Storm
348 6.5 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.22 fails to enforce operator.admin scope on mutating internal ACP chat commands, allowing unauthorized modifications. Attackers without admin privileges can execute mutating co… New CWE-862
 Missing Authorization
CVE-2026-35631 2026-04-16 02:21 2026-04-10 Show GitHub Exploit DB Packet Storm
349 7.5 HIGH
Network
- - Missing Authorization vulnerability in Plisio Accept Cryptocurrencies with Plisio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accept Cryptocurrencies wi… New CWE-862
 Missing Authorization
CVE-2026-6372 2026-04-16 02:17 2026-04-16 Show GitHub Exploit DB Packet Storm
350 5.9 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HashThemes Mini Ajax Cart for WooCommerce allows Stored XSS.This issue affects Mini Ajax Cart for… New CWE-79
Cross-site Scripting
CVE-2026-6370 2026-04-16 02:17 2026-04-16 Show GitHub Exploit DB Packet Storm