Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200751 5.9 警告
Network
Wireshark - Wireshark の IEEE 802.11 ディセクタにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4078 2016-11-17 16:45 2016-04-22 Show GitHub Exploit DB Packet Storm
200752 5.9 警告
Network
Wireshark - Wireshark の epan/proto.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-4006 2016-11-17 16:45 2016-04-22 Show GitHub Exploit DB Packet Storm
200753 7.8 重要
Local
Google - Android の Debuggerd の debuggerd/debuggerd.cpp における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3885 2016-11-17 16:41 2016-09-6 Show GitHub Exploit DB Packet Storm
200754 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の tree.c の xmlStringGetNodeList 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3627 2016-11-17 16:31 2016-05-13 Show GitHub Exploit DB Packet Storm
200755 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の parser.c の xmlParserEntityCheck および xmlParseAttValueComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3705 2016-11-17 16:31 2016-05-3 Show GitHub Exploit DB Packet Storm
200756 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/i387.c の fpu_fxrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3159 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
200757 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/xstate.c の xrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3158 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
200758 5.5 警告 オラクル
OpenBSD
- OpenSSH の sshd の session.c における CRLF インジェクションの脆弱性 CWE-Other
その他
CVE-2016-3115 2016-11-17 16:29 2016-03-9 Show GitHub Exploit DB Packet Storm
200759 4.6 警告 Xen プロジェクト
オラクル
- Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2270 2016-11-17 16:29 2016-02-17 Show GitHub Exploit DB Packet Storm
200760 4.3 警告 Debian
Canonical
xmlsoft.org
- libxml2 の HTMLparser.c の htmlParseNameComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2073 2016-11-17 16:20 2016-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1301 8.8 HIGH
Network
snorkel snorkel The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler mo… CWE-502
 Deserialization of Untrusted Data
CVE-2026-31223 2026-05-16 04:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1302 8.8 HIGH
Network
snorkel snorkel The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() method of the Trainer class. The method loads model checkpoint files using torch.lo… CWE-502
 Deserialization of Untrusted Data
CVE-2026-31222 2026-05-16 04:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1303 8.8 HIGH
Network
lightningai pytorch_lightning PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which … CWE-502
 Deserialization of Untrusted Data
CVE-2026-31221 2026-05-16 04:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1304 9.8 CRITICAL
Network
- - PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged… CWE-94
Code Injection
CVE-2026-31220 2026-05-16 04:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1305 7.5 HIGH
Network
signalk signal_k_server Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.25.0, the HTTP login endpoints (POST /login and POST /signalk/v1/auth/login) are protected by express-… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-41893 2026-05-16 04:14 2026-05-10 Show GitHub Exploit DB Packet Storm
1306 5.3 MEDIUM
Network
apache commons_configuration Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue … CWE-674
 Uncontrolled Recursion
CVE-2026-45205 2026-05-16 03:40 2026-05-14 Show GitHub Exploit DB Packet Storm
1307 7.4 HIGH
Network
microsoft authenticator Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network. CWE-200
Information Exposure
CVE-2026-41615 2026-05-16 03:39 2026-05-15 Show GitHub Exploit DB Packet Storm
1308 8.8 HIGH
Network
microsoft windows_admin_center Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network. CWE-284
Improper Access Control
CVE-2026-41086 2026-05-16 03:38 2026-05-13 Show GitHub Exploit DB Packet Storm
1309 9.1 CRITICAL
Network
microsoft azure_sdk_for_java Improper authentication in Azure SDK allows an unauthorized attacker to bypass a security feature over a network. CWE-287
CWE-347
Improper Authentication
 Improper Verification of Cryptographic Signature
CVE-2026-33117 2026-05-16 03:38 2026-05-13 Show GitHub Exploit DB Packet Storm
1310 9.9 CRITICAL
Network
microsoft dynamics_365_customer_insights Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network. CWE-269
 Improper Privilege Management
CVE-2026-33821 2026-05-16 03:26 2026-05-13 Show GitHub Exploit DB Packet Storm