Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200581 5.3 警告
Network
BlueZ Project - BlueZ の tools/parser/l2cap.c ソースファイルの l2cap_dump 関数におけるバッファオーバーリードの脆弱性 CWE-119
CWE-125
CVE-2016-9797 2016-12-6 14:26 2016-11-14 Show GitHub Exploit DB Packet Storm
200582 6.5 警告
Local
IBM - IBM PowerKVM の Linux Kernel コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-284
CVE-2016-3044 2016-12-6 11:29 2016-07-7 Show GitHub Exploit DB Packet Storm
200583 6.8 警告 Mozilla Foundation
openSUSE project
SUSE
オラクル
- Mozilla Firefox の dom/html/nsHTMLDocument.cpp における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-1961 2016-12-5 17:49 2016-03-8 Show GitHub Exploit DB Packet Storm
200584 6.8 警告 Mozilla Foundation
openSUSE project
SUSE
オラクル
- Mozilla Firefox の HTML5 文字列パーサの nsHtml5TreeBuilder クラスにおける整数アンダーフローの脆弱性 CWE-Other
その他
CVE-2016-1960 2016-12-5 17:49 2016-03-8 Show GitHub Exploit DB Packet Storm
200585 4.3 警告 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox の browser/base/content/browser.js におけるアドレスバーを偽装される脆弱性 CWE-Other
その他
CVE-2016-1958 2016-12-5 17:48 2016-03-8 Show GitHub Exploit DB Packet Storm
200586 4.3 警告 Mozilla Foundation
openSUSE project
SUSE
オラクル
- Mozilla Firefox の libstagefright におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1957 2016-12-5 17:48 2016-03-8 Show GitHub Exploit DB Packet Storm
200587 6.8 警告 Mozilla Foundation
openSUSE project
SUSE
オラクル
- Mozilla Firefox の dom/security/nsCSPContext.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1954 2016-12-5 17:47 2016-03-8 Show GitHub Exploit DB Packet Storm
200588 6.8 警告 Mozilla Foundation
openSUSE project
SUSE
オラクル
- Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1952 2016-12-5 17:47 2016-03-8 Show GitHub Exploit DB Packet Storm
200589 7.8 重要
Local
Apache Software Foundation
オラクル
- 複数の Linux ディストリビューションの Tomcat パッケージにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5425 2016-12-5 17:01 2016-10-10 Show GitHub Exploit DB Packet Storm
200590 7.3 重要
Network
ヒューレット・パッカード - HP Network Automation Software の RMI サービスにおける任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-4385 2016-12-5 17:01 2016-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1691 7.8 HIGH
Local
- - An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a local attacker to escalate privileges on affected installations. Please not… CWE-346
 Origin Validation Error
CVE-2025-71217 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
1692 7.8 HIGH
Local
- - A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations. Please note: an att… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-71216 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
1693 7.0 HIGH
Local
- - A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privileges on affected installations. … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-71215 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
1694 7.8 HIGH
Local
- - An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attacker to escalate privileges on affected installations. Please note: an attack… CWE-346
 Origin Validation Error
CVE-2025-71214 2026-05-22 00:16 2026-05-21 Show GitHub Exploit DB Packet Storm
1695 7.8 HIGH
Local
- - MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability CWE-823
 Use of Out-of-range Pointer Offset
CVE-2026-28764 2026-05-22 00:05 2026-05-21 Show GitHub Exploit DB Packet Storm
1696 7.5 HIGH
Network
- - In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-20239 2026-05-22 00:00 2026-05-21 Show GitHub Exploit DB Packet Storm
1697 6.5 MEDIUM
Network
- - In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503.13, and 9.3.2411.129, … CWE-20
 Improper Input Validation 
CVE-2026-20240 2026-05-22 00:00 2026-05-21 Show GitHub Exploit DB Packet Storm
1698 7.1 HIGH
Local
- - In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - t… CWE-269
 Improper Privilege Management
CVE-2026-46333 2026-05-21 23:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1699 8.8 HIGH
Network
struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the grid tile compositing, allowing an attacker to write … CWE-787
 Out-of-bounds Write
CVE-2026-32740 2026-05-21 23:16 2026-05-20 Show GitHub Exploit DB Packet Storm
1700 9.1 CRITICAL
Network
eclipse glassfish An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of … CWE-94
CWE-917
Code Injection
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2026-2586 2026-05-21 22:18 2026-05-20 Show GitHub Exploit DB Packet Storm