Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200751 10 危険 シスコシステムズ - Cisco RV220W デバイスの Web ベースの管理インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-6319 2016-02-23 12:28 2015-08-17 Show GitHub Exploit DB Packet Storm
200752 4.3 警告 OpenJPEG project - OpenJPEG の opj_j2k_update_image_data 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1923 2016-02-23 11:53 2016-01-18 Show GitHub Exploit DB Packet Storm
200753 4.3 警告
Network
マイクロソフト - Internet Explorer におけるクロスドメイン ポリシーを回避される脆弱性 CWE-Other
その他
CVE-2016-0069 2016-02-23 11:20 2016-02-19 Show GitHub Exploit DB Packet Storm
200754 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 から 11 における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0068 2016-02-23 11:11 2016-02-9 Show GitHub Exploit DB Packet Storm
200755 7.8 危険 アドビシステムズ - Adobe Experience Manager の Dispatcher におけるディスパッチャのルールを回避される脆弱性 CWE-noinfo
情報不足
CVE-2016-0957 2016-02-23 11:09 2016-02-9 Show GitHub Exploit DB Packet Storm
200756 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-0983 2016-02-23 10:26 2016-02-9 Show GitHub Exploit DB Packet Storm
200757 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0979 2016-02-23 10:26 2016-02-9 Show GitHub Exploit DB Packet Storm
200758 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0978 2016-02-23 10:26 2016-02-9 Show GitHub Exploit DB Packet Storm
200759 10 危険 Harman - Harman AMX デバイスの /bin/bw の setUpSubtleUserAccount 関数におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-1984 2016-02-22 16:46 2016-01-20 Show GitHub Exploit DB Packet Storm
200760 10 危険 Harman - Harman AMX 製品がハードコードされたパスワードを使用する問題 CWE-255
CWE-Other
CVE-2015-8362 2016-02-22 16:46 2016-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 6.8 MEDIUM
Network
- - ProcessWire CMS version 3.0.255 and prior contain a server-side request forgery vulnerability in the admin panel's 'Add Module From URL' feature that allows authenticated administrators to supply arb… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-40500 2026-04-16 07:17 2026-04-16 Show GitHub Exploit DB Packet Storm
202 7.5 HIGH
Network
- - Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network. New CWE-755
 Improper Handling of Exceptional Conditions
CVE-2026-23666 2026-04-16 07:16 2026-04-15 Show GitHub Exploit DB Packet Storm
203 - - - Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role. New CWE-79
Cross-site Scripting
CVE-2026-1711 2026-04-16 07:16 2026-04-16 Show GitHub Exploit DB Packet Storm
204 - - - Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role. New CWE-80
Basic XSS
CVE-2026-1564 2026-04-16 07:16 2026-04-16 Show GitHub Exploit DB Packet Storm
205 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… New - CVE-2026-6398 2026-04-16 06:17 2026-04-16 Show GitHub Exploit DB Packet Storm
206 8.8 HIGH
Network
- - Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High) New CWE-122
Heap-based Buffer Overflow
CVE-2026-6305 2026-04-16 06:17 2026-04-16 Show GitHub Exploit DB Packet Storm
207 4.3 MEDIUM
Network
- - Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium secu… New CWE-122
Heap-based Buffer Overflow
CVE-2026-6298 2026-04-16 06:17 2026-04-16 Show GitHub Exploit DB Packet Storm
208 9.6 CRITICAL
Network
- - Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical) New CWE-122
Heap-based Buffer Overflow
CVE-2026-6296 2026-04-16 06:17 2026-04-16 Show GitHub Exploit DB Packet Storm
209 8.8 HIGH
Network
- - Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase() method, which appends the $source… New CWE-20
CWE-78
 Improper Input Validation 
OS Command 
CVE-2026-40261 2026-04-16 06:17 2026-04-16 Show GitHub Exploit DB Packet Storm
210 6.1 MEDIUM
Network
- - ApostropheCMS is an open-source Node.js content management system. A regression introduced in commit 49d0bb7, included in versions 2.17.1 of the ApostropheCMS-maintained sanitize-html package bypasse… New CWE-79
Cross-site Scripting
CVE-2026-40186 2026-04-16 06:17 2026-04-16 Show GitHub Exploit DB Packet Storm