Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200941 6.5 警告
Network
OpenJPEG project - OpenJPEG の convert.c(jp2):942 の imagetotga におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-9115 2016-11-2 15:26 2016-10-29 Show GitHub Exploit DB Packet Storm
200942 7.5 重要
Network
OpenJPEG project - OpenJPEG の convert.c:1943(jp2) の imagetopnm におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-9114 2016-11-2 15:26 2016-10-29 Show GitHub Exploit DB Packet Storm
200943 7.5 重要
Network
OpenJPEG project - OpenJPEG の convertbmp.c:980 の imagetobmp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-9113 2016-11-2 15:26 2016-10-29 Show GitHub Exploit DB Packet Storm
200944 7.5 重要
Network
OpenJPEG project - OpenJPEG の openjp2/pi.c:523 の opj_pi_next_cprl 関数における浮動小数点例外の脆弱性 CWE-Other
その他
CVE-2016-9112 2016-11-2 15:26 2016-10-27 Show GitHub Exploit DB Packet Storm
200945 7.8 重要
Local
OpenJPEG project - OpenJPEG ライブラリの JPEG2000 画像ファイル形式パーサにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8332 2016-11-2 15:26 2016-09-29 Show GitHub Exploit DB Packet Storm
200946 6.1 警告
Network
AlienVault - AlienVault OSSIM および USM の脆弱性検査スケジューラの複数の GET パラメータにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8583 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
200947 9.8 緊急
Network
AlienVault - AlienVault OSSIM および USM の gauge.php における任意の SQL クエリを実行される脆弱性 CWE-89
SQLインジェクション
CVE-2016-8582 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
200948 6.1 警告
Network
AlienVault - AlienVault OSSIM および USM のログインプロセスの User-Agent ヘッダにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8581 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
200949 9.8 緊急
Network
AlienVault - AlienVault OSSIM および USM の複数のウィジェットファイルにおける PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-8580 2016-11-2 15:06 2016-10-3 Show GitHub Exploit DB Packet Storm
200950 7.5 重要
Network
シスコシステムズ - Cisco ASA ソフトウェアのローカル認証局機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-6431 2016-11-1 16:58 2016-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1311 - - - STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution (LCE) with the privileges of the user running STIGQter. Thi… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-42881 2026-05-15 03:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1312 8.1 HIGH
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permissions) to overwrite existi… CWE-269
CWE-285
CWE-639
CWE-837
 Improper Privilege Management
Improper Authorization
 Authorization Bypass Through User-Controlled Key
 Improper Enforcement of a Single, Unique Action
CVE-2026-42609 2026-05-15 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1313 8.8 HIGH
Network
arubanetworks arubaos
sd-wan
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo… CWE-77
Command Injection
CVE-2026-44869 2026-05-15 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1314 1.8 LOW
Physics
- - Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access. CWE-693
 Protection Mechanism Failure
CVE-2026-30904 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
1315 7.8 HIGH
Local
- - External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via loca… CWE-73
 External Control of File Name or Path
CVE-2026-30905 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
1316 7.8 HIGH
Local
- - Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. CWE-426
 Untrusted Search Path
CVE-2026-30906 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
1317 5.4 MEDIUM
Network
- - podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without … CWE-79
Cross-site Scripting
CVE-2026-43644 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
1318 3.7 LOW
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments t… CWE-328
 Use of Weak Hash
CVE-2026-44582 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
1319 7.6 HIGH
Network
- - Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls … CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-44516 2026-05-15 03:14 2026-05-15 Show GitHub Exploit DB Packet Storm
1320 - - - The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redi… CWE-601
Open Redirect
CVE-2026-44503 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm