Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200231 7.3 重要
Network 		ヒューレット・パッカード - HP Network Automation Software の RMI サービスにおける任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2016-4385 2016-12-5 17:01 2016-09-20 Show GitHub Exploit DB Packet Storm
200232 6.8 警告 Debian
Canonical
Apache Software Foundation		 - Apache Tomcat における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2015-5346 2016-12-5 17:01 2015-12-10 Show GitHub Exploit DB Packet Storm
200233 5 警告 ヒューレット・パッカード
Debian
Canonical
Apache Software Foundation		 - Apache Tomcat の Mapper コンポーネントにおけるディレクトリの存在を特定される脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-5345 2016-12-5 17:01 2015-12-6 Show GitHub Exploit DB Packet Storm
200234 4 警告 ヒューレット・パッカード
Debian
Canonical
Apache Software Foundation		 - Apache Tomcat の RequestUtil.java におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-5174 2016-12-5 17:01 2015-08-17 Show GitHub Exploit DB Packet Storm
200235 5 警告 ヒューレット・パッカード
Debian
Apache Software Foundation		 - Apache Tomcat の Expression Language の実装における SecurityManager 保護メカニズムを回避される脆弱性 CWE-Other
その他 		CVE-2014-7810 2016-12-5 17:01 2014-12-9 Show GitHub Exploit DB Packet Storm
200236 7.5 重要
Network 		OpenSSL Project
SUSE		 - OpenSSL の crypto/x509/x509_vfy.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7052 2016-12-5 16:57 2016-09-26 Show GitHub Exploit DB Packet Storm
200237 9.8 緊急
Network 		OpenSSL Project - OpenSSL の statem/statem.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-6309 2016-12-5 16:57 2016-09-26 Show GitHub Exploit DB Packet Storm
200238 5.9 警告
Network 		Apache Software Foundation - Apache HTTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1546 2016-12-5 16:57 2016-04-11 Show GitHub Exploit DB Packet Storm
200239 6.5 警告 Debian
Canonical
Apache Software Foundation		 - Apache Tomcat の org/apache/naming/factory/ResourceLinkFactory.java の setGlobalContext メソッドにおける SecurityManager の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0763 2016-12-5 16:57 2016-01-5 Show GitHub Exploit DB Packet Storm
200240 7.8 重要
Local 		BMC Software - BMC Patrol における root 権限へ昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9638 2016-12-5 14:09 2016-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1281 - - - The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in internal/api/server.go is vulnerable to an ope… CWE-601
Open Redirect 		CVE-2026-44427 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1282 6.5 MEDIUM
Network 		vllm vllm vLLM is an inference and serving engine for large language models (LLMs). From to before 0.20.0, the extract_hidden_states speculative decoding proposer in vLLM returns a tensor with an incorrect sh… CWE-131
CWE-704
Incorrect Calculation of Buffer Size
 Incorrect Type Conversion or Cast 		CVE-2026-44223 2026-05-16 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1283 5.3 MEDIUM
Network 		- - Foscam VD1 Video Doorbell before V5.3.13_1072 is vulnerable to Cleartext Transmission of Sensitive Information. The device transmits sensitive Session Description Protocol (SDP), including ICE creden… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-38740 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1284 8.8 HIGH
Network 		- - The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CW… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-31219 2026-05-16 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1285 8.8 HIGH
Network 		- - The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CW… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-31218 2026-05-16 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1286 6.3 MEDIUM
Network 		- - Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all … CWE-94
Code Injection 		CVE-2025-69443 2026-05-16 00:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1287 7.8 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-40408 2026-05-16 00:11 2026-05-13 Show GitHub Exploit DB Packet Storm
1288 5.0 MEDIUM
Local 		microsoft visual_studio_code Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. CWE-59
CWE-79
CWE-200
Link Following
Cross-site Scripting
Information Exposure 		CVE-2026-41610 2026-05-16 00:11 2026-05-13 Show GitHub Exploit DB Packet Storm
1289 7.0 HIGH
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-40410 2026-05-16 00:10 2026-05-13 Show GitHub Exploit DB Packet Storm
1290 7.4 HIGH
Adjacent 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network. CWE-476
 NULL Pointer Dereference 		CVE-2026-40413 2026-05-16 00:08 2026-05-13 Show GitHub Exploit DB Packet Storm