Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200871 6.5 警告
Network
LibGD project
Debian
openSUSE project
- GD Graphics Library の gd_gif_out.c の output 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6161 2016-11-21 11:00 2016-05-14 Show GitHub Exploit DB Packet Storm
200872 6.5 警告
Network
LibGD project
Debian
openSUSE project
- GD Graphics Library の gdImageCreateFromTgaCtx 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6132 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
200873 7.5 重要
Network
The PHP Group
LibGD project
Debian
openSUSE project
- PHP で使用される GD Graphics Library の gd_crop.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-6128 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
200874 8.8 重要
Network
Mozilla Foundation
openSUSE project
Canonical
Debian
SUSE
レッドハット
- Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2818 2016-11-21 10:57 2016-06-7 Show GitHub Exploit DB Packet Storm
200875 9.1 緊急
Network
The PHP Group
LibGD project
Debian
openSUSE project
- 特定の カスタム PHP の設定で使用される GD Graphics Library の gd_xbm.c におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-5116 2016-11-21 10:37 2016-05-13 Show GitHub Exploit DB Packet Storm
200876 9.8 緊急
Network
openSUSE project
ImageMagick
Canonical
GraphicsMagick
Debian
オラクル
SUSE
- GraphicsMagick および ImageMagick の blob.c の OpenBlob 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5118 2016-11-21 10:35 2016-05-30 Show GitHub Exploit DB Packet Storm
200877 5.5 警告
Local
ImageMagick
Canonical
レッドハット
- ImageMagick の EPHEMERAL コーダにおける任意のファイルを削除される脆弱性 CWE-Other
その他
CVE-2016-3715 2016-11-18 17:01 2016-05-3 Show GitHub Exploit DB Packet Storm
200878 8.8 重要
Network
Google
openSUSE project
Fedora Project
- Google Chrome の PDFium で使用される OpenJPEG におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5157 2016-11-18 17:00 2016-08-31 Show GitHub Exploit DB Packet Storm
200879 8.4 重要
Local
ImageMagick
Canonical
- ImageMagick に入力値検証不備の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3714 2016-11-18 16:58 2016-05-4 Show GitHub Exploit DB Packet Storm
200880 8.8 重要
Network
Google
openSUSE project
- Google Chrome のイベントバインディングの extensions/renderer/event_bindings.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5156 2016-11-18 16:34 2016-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1931 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remote Code Execution. T… CWE-88
Argument Injection
CVE-2026-44193 2026-05-16 02:30 2026-05-14 Show GitHub Exploit DB Packet Storm
1932 4.7 MEDIUM
Network
lfprojects mcp_registry The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audienc… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44428 2026-05-16 02:23 2026-05-15 Show GitHub Exploit DB Packet Storm
1933 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileg… CWE-78
OS Command 
CVE-2026-44194 2026-05-16 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm
1934 6.5 MEDIUM
Network
shellhub shellhub ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated u… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-44423 2026-05-16 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1935 7.5 HIGH
Network
zitadel zitadel ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to pro… CWE-90
LDAP Injection
CVE-2026-44671 2026-05-16 02:15 2026-05-15 Show GitHub Exploit DB Packet Storm
1936 6.5 MEDIUM
Network
frappe erpnext ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyo… CWE-862
 Missing Authorization
CVE-2026-44448 2026-05-16 01:20 2026-05-14 Show GitHub Exploit DB Packet Storm
1937 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell scrip… CWE-88
Argument Injection
CVE-2026-45158 2026-05-16 01:19 2026-05-14 Show GitHub Exploit DB Packet Storm
1938 6.5 MEDIUM
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication fa… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-44195 2026-05-16 01:06 2026-05-14 Show GitHub Exploit DB Packet Storm
1939 9.8 CRITICAL
Network
apache tomcat Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0… CWE-20
 Improper Input Validation 
CVE-2026-41293 2026-05-16 00:57 2026-05-13 Show GitHub Exploit DB Packet Storm
1940 9.8 CRITICAL
Network
apache tomcat DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, fr… CWE-592
 DEPRECATED: Authentication Bypass Issues
CVE-2026-43512 2026-05-16 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm