Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200391 7.8 重要
Local 		Linux - Linux Kernel の ALSA サブシステムの sound/core/pcm_lib.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
CWE-416
CVE-2016-9794 2017-01-11 15:44 2016-04-14 Show GitHub Exploit DB Packet Storm
200392 7.8 重要
Local 		Linux - Linux Kernel の net/core/sock.c の sock_setsockopt 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-9793 2017-01-11 15:44 2016-12-10 Show GitHub Exploit DB Packet Storm
200393 7.8 重要
Local 		Linux - Linux Kernel の KVM におけるホスト OS 権限を取得される脆弱性 CWE-125
境界外読み取り 		CVE-2016-9777 2017-01-11 15:44 2016-12-2 Show GitHub Exploit DB Packet Storm
200394 5.5 警告
Local 		Linux - Linux Kernel の arch/x86/kvm/emulate.c におけるカーネルスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9756 2017-01-11 15:44 2016-12-2 Show GitHub Exploit DB Packet Storm
200395 7.8 重要
Local 		Linux - Linux Kernel の netfilter サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-787
境界外書き込み 		CVE-2016-9755 2017-01-11 15:44 2016-11-29 Show GitHub Exploit DB Packet Storm
200396 5.5 警告
Local 		Linux - Linux Kernel の fs/xfs/xfs_attr_list.c のエラーパスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-400
リソースの枯渇 		CVE-2016-9685 2017-01-11 15:44 2016-04-12 Show GitHub Exploit DB Packet Storm
200397 5.5 警告
Local 		Linux - Linux Kernel の arch/x86/kvm/vmx.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-388
エラー処理 		CVE-2016-9588 2017-01-11 15:44 2016-12-13 Show GitHub Exploit DB Packet Storm
200398 7.8 重要
Local 		Linux - Linux Kernel の block/blk-map.c の blk_rq_map_user_iov 関数における任意のカーネルメモリ領域を読み書きされる脆弱性 CWE-416
解放済みメモリの使用 		CVE-2016-9576 2017-01-11 15:44 2016-12-10 Show GitHub Exploit DB Packet Storm
200399 7 重要
Local 		Linux - Linux Kernel のパフォーマンスサブシステムの kernel/events/core.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6787 2017-01-11 15:44 2016-12-5 Show GitHub Exploit DB Packet Storm
200400 7 重要
Local 		Linux - Linux Kernel のパフォーマンスサブシステムの kernel/events/core.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6786 2017-01-11 15:44 2016-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2391 7.6 HIGH
Network 		- - MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, MikroORM's identifier-quoting helper … CWE-89
SQL Injection 		CVE-2026-44680 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2392 4.3 MEDIUM
Network 		- - Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be (partially) bypassed because of a mismatch in URL parsing. The original validation logic parsed… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-44502 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2393 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, uploadedFileSaveIn() in lua/upload/upload.go uses filepath.Join() with the caller-supplied directory but performs no boundary c… CWE-22
Path Traversal 		CVE-2026-43982 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2394 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and L.PCall() execute. Sin… CWE-362
Race Condition 		CVE-2026-43981 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2395 4.3 MEDIUM
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "M… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43936 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2396 8.1 HIGH
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset l… CWE-20
CWE-807
 Improper Input Validation 
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-43935 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2397 - - - A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succe… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-2264 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2398 7.8 HIGH
Local 		- - NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exec… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24162 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2399 5.3 MEDIUM
Network 		- - IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the inst… CWE-1392
 Use of Default Credentials 		CVE-2025-36221 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2400 4.3 MEDIUM
Network 		- - IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, … CWE-89
SQL Injection 		CVE-2025-36220 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm