Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200771 8.8 重要
Local
Debian
Fabrice Bellard
Canonical
- QEMU の VGA モジュールにおけるホスト上で任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-3710 2016-11-17 15:34 2016-05-9 Show GitHub Exploit DB Packet Storm
200772 8.8 重要
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の x86 シャドウページテーブルコードにおける整数オーバーフローの脆弱性 CWE-264
CWE-Other
CVE-2016-3960 2016-11-17 15:33 2016-04-18 Show GitHub Exploit DB Packet Storm
200773 7.8 重要
Local
Linux - Linux Kernel の block/genhd.c の disk_seqf_stop 関数における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-7910 2016-11-17 14:41 2016-08-16 Show GitHub Exploit DB Packet Storm
200774 5.5 警告
Local
Linux - Linux Kernel の drivers/tty/tty_ldisc.c の tty_set_termios_ldisc 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-8964 2016-11-17 14:41 2015-11-28 Show GitHub Exploit DB Packet Storm
200775 7 重要
Local
Linux - Linux Kernel の kernel/events/core.c における権限を取得される脆弱性 CWE-362
CWE-Other
CVE-2015-8963 2016-11-17 14:41 2015-12-15 Show GitHub Exploit DB Packet Storm
200776 5 警告
Local
Linux - Linux Kernel の net/netfilter/nfnetlink.c の nfnetlink_rcv_batch 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-7917 2016-11-17 14:31 2016-02-3 Show GitHub Exploit DB Packet Storm
200777 5.5 警告
Local
Linux - Linux Kernel の fs/proc/base.c の environ_read 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-362
競合状態
CVE-2016-7916 2016-11-17 14:31 2016-05-11 Show GitHub Exploit DB Packet Storm
200778 5.5 警告
Local
Linux - Linux Kernel の drivers/hid/hid-core.c の ahid_input_field 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2016-7915 2016-11-17 14:31 2016-01-19 Show GitHub Exploit DB Packet Storm
200779 5.5 警告
Local
Linux - Linux Kernel の lib/assoc_array.c の assoc_array_insert_into_terminal_node 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2016-7914 2016-11-17 14:31 2016-05-4 Show GitHub Exploit DB Packet Storm
200780 7.8 重要
Local
Linux - Linux Kernel の drivers/media/tuners/tuner-xc2028.c の xc2028_set_config 関数における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-7913 2016-11-17 14:31 2016-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1191 9.4 CRITICAL
Network
thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, the default deny-lists used by Gotenberg's downloadFrom feature and webhook feature are bypassable. Because the filter is r… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42596 2026-05-18 21:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1192 3.7 LOW
Network
- - A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2. Impacted is the function Login of the file app/Models/Employee.php of the component Employee Login. This manipulation cau… CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash
CVE-2026-8803 2026-05-18 21:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1193 - - - Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver process to crash CWE-1286
 Improper Validation of Syntactic Correctness of Input
CVE-2026-0983 2026-05-18 21:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1194 7.5 HIGH
Network
netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section is parsed and buffered before any message size limi… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-44248 2026-05-18 21:15 2026-05-14 Show GitHub Exploit DB Packet Storm
1195 8.2 HIGH
Network
thecodingmachine gotenberg Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.30.0, The ExifTool metadata write blocklist in Gotenberg can be bypassed using ExifTool's group-prefix syntax, enabling arbitrary… CWE-184
 Incomplete Blacklist
CVE-2026-42590 2026-05-18 21:15 2026-05-15 Show GitHub Exploit DB Packet Storm
1196 9.1 CRITICAL
Network
netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request by queue.poll() onc… CWE-444
HTTP Request Smuggling
CVE-2026-42584 2026-05-18 21:15 2026-05-14 Show GitHub Exploit DB Packet Storm
1197 4.3 MEDIUM
Network
- - A vulnerability was detected in opensourcepos Open Source Point of Sale up to 3.4.2. This issue affects the function getPicThumb of the file app/Controllers/Items.php. The manipulation of the argumen… CWE-22
Path Traversal
CVE-2026-8802 2026-05-18 20:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1198 - - - Authorization Bypass vulnerability in Creartia's ICMS software could allow an attacker to gain unauthorized access to protected features by manipulating the HTTP redirect headers of the login process… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-4320 2026-05-18 20:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1199 7.3 HIGH
Network
- - A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file update_info.php of the component GET Param… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8785 2026-05-18 13:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1200 4.2 MEDIUM
Local
- - A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change_file_status of the file cramfsck.c. Performing a manipulation results in symlink following. The attack r… CWE-59
CWE-61
Link Following
 UNIX Symbolic Link (Symlink) Following
CVE-2026-8784 2026-05-18 13:16 2026-05-18 Show GitHub Exploit DB Packet Storm