Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200971 9.3 危険 Matroska.org - libEBML の EbmlMaster::Read 関数における脆弱性 CWE-Other
その他
CVE-2015-8789 2016-02-10 14:05 2015-10-20 Show GitHub Exploit DB Packet Storm
200972 6.1 警告
Network
池澤彩野花 - Vine MV におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1143 2016-02-10 10:18 2016-01-29 Show GitHub Exploit DB Packet Storm
200973 4.3 警告 シスコシステムズ - Cisco Unity Connection におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1304 2016-02-10 09:53 2016-01-28 Show GitHub Exploit DB Packet Storm
200974 5 警告 Novell
Matroska.org
- libMatroska の KaxInternalBlock::ReadData 関数におけるプロセスヒープメモリから重要な情報を取得される脆弱性 CWE-119
CWE-200
CVE-2015-8792 2016-02-9 16:07 2015-10-20 Show GitHub Exploit DB Packet Storm
200975 7.8 危険 シスコシステムズ - Cisco Wide Area Application Service および Virtual WAAS デバイス上で稼動する CIFS 最適化機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-6421 2016-02-9 15:42 2015-08-17 Show GitHub Exploit DB Packet Storm
200976 6.8 警告 Comodo - Comodo Chromodo に同一生成元ポリシーを適用していない問題および旧バージョンの Chromium を使用している問題 - - 2016-02-9 15:14 2016-02-4 Show GitHub Exploit DB Packet Storm
200977 6.4 警告 Apache Software Foundation - Apache Batik における XML 外部エンティティの脆弱性 CWE-Other
その他
CVE-2015-0250 2016-02-8 18:01 2015-03-17 Show GitHub Exploit DB Packet Storm
200978 3.5 注意 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server : Query Cache に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4807 2016-02-8 17:59 2015-10-20 Show GitHub Exploit DB Packet Storm
200979 5 警告 Mozilla Foundation - Mozilla Firefox における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-7208 2016-02-8 17:57 2015-12-15 Show GitHub Exploit DB Packet Storm
200980 2.6 注意 MySQL AB
wolfSSL Inc.
オラクル
- wolfSSL における RSA 秘密鍵を取得される脆弱性 CWE-Other
その他
CVE-2015-7744 2016-02-8 17:39 2016-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 8.1 HIGH
Local
- - Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trusted_mods or secure.http_mods, then a crafted mod can intercept the re… Update CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2026-40960 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
362 9.8 CRITICAL
Network
- - Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string li… Update CWE-122
Heap-based Buffer Overflow
CVE-2026-40504 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
363 4.9 MEDIUM
Local
- - FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c. Update CWE-190
 Integer Overflow or Wraparound
CVE-2026-40962 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
364 7.4 HIGH
Local
- - radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release… Update CWE-78
OS Command 
CVE-2026-41015 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
365 8.8 HIGH
Local
- - WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machin… Update CWE-306
Missing Authentication for Critical Function
CVE-2026-6348 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
366 - - - The  iSherlock developed by HGiga  has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server. Update CWE-78
OS Command 
CVE-2026-6349 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
367 9.8 CRITICAL
Network
- - MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution flow and execute arbitrary code. Update CWE-121
Stack-based Buffer Overflow
CVE-2026-6350 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
368 7.5 HIGH
Network
- - MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files. Update CWE-93
CRLF Injection
CVE-2026-6351 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
369 8.8 HIGH
Network
- - In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, i… Update CWE-1242
 Inclusion of Undocumented Features or Chicken Bits
CVE-2023-3634 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
370 4.3 MEDIUM
Network
- - In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint. Update CWE-203
 Information Exposure Through Discrepancy
CVE-2023-5872 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm