Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201131 5.5 警告
Local
シスコシステムズ - Cisco TelePresence TC または CE ソフトウェアが稼動する TelePresence エンドポイントにおけるローカルのシェルコマンドを挿入される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-6459 2016-11-24 16:53 2016-11-2 Show GitHub Exploit DB Packet Storm
201132 7.5 重要
Network
シスコシステムズ - Cisco E メール セキュリティ アプライアンス用 AsyncOS のコンテンツフィルタリング機能における設定されたコンテンツフィルタを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6458 2016-11-24 16:53 2016-11-2 Show GitHub Exploit DB Packet Storm
201133 2.5
Local
シスコシステムズ - Cisco IOS XE のアンバンドルのパッケージのユーティリティにおける書き込みアクセス権を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6450 2016-11-24 16:53 2016-11-15 Show GitHub Exploit DB Packet Storm
201134 6.4 警告 Mozilla Foundation
openSUSE project
- Mozilla Firefox で使用される Mozilla Network Security Services の lib/freebl/mpi/mpi.c における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2016-1938 2016-11-22 17:49 2016-01-26 Show GitHub Exploit DB Packet Storm
201135 7.5 重要
Network
OpenSSL Project
オラクル
- OpenSSL の SRP_VBASE_get_by_user の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-0798 2016-11-22 17:47 2016-03-1 Show GitHub Exploit DB Packet Storm
201136 5.9 警告
Network
Mozilla Foundation
日立
オラクル
- Mozilla Firefox で使用される Mozilla Network Security Services におけるサーバになりすまされる脆弱性 CWE-Other
その他
CVE-2015-7575 2016-11-22 17:44 2015-12-22 Show GitHub Exploit DB Packet Storm
201137 7.5 危険 Mozilla Foundation
オラクル
- Mozilla Firefox などの製品で使用される Network Security Services の Netscape Portable Runtime における整数オーバーフローの脆弱性 CWE-119
CWE-189
CVE-2015-7183 2016-11-22 17:41 2015-11-3 Show GitHub Exploit DB Packet Storm
201138 7.5 危険 Mozilla Foundation
オラクル
- Mozilla Firefox などの製品で使用される Network Security Services におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-7181 2016-11-22 17:37 2015-11-3 Show GitHub Exploit DB Packet Storm
201139 9.3 危険 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox の BufferSubData 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1935 2016-11-22 16:50 2016-01-26 Show GitHub Exploit DB Packet Storm
201140 10 危険 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1930 2016-11-22 16:50 2016-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2151 - - - Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.11.0 through 2.28.1, a Stored XSS vulnerability is caused by incorrect escaping of a saved filter's owner, allowing an att… CWE-79
Cross-site Scripting
CVE-2026-40607 2026-05-23 05:31 2026-05-23 Show GitHub Exploit DB Packet Storm
2152 8.8 HIGH
Network
litellm litellm LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restri… CWE-863
 Incorrect Authorization
CVE-2026-47102 2026-05-23 04:39 2026-05-22 Show GitHub Exploit DB Packet Storm
2153 8.8 HIGH
Network
litellm litellm LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored with… CWE-863
 Incorrect Authorization
CVE-2026-47101 2026-05-23 04:39 2026-05-22 Show GitHub Exploit DB Packet Storm
2154 9.8 CRITICAL
Network
drupal drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection. This issue affects Drupal core: from 8.9.0 before 10.4.… CWE-89
SQL Injection
CVE-2026-9082 2026-05-23 04:38 2026-05-21 Show GitHub Exploit DB Packet Storm
2155 7.5 HIGH
Network
apache cxf The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code execution capabilities, if untrusted use… CWE-20
 Improper Input Validation 
CVE-2026-44417 2026-05-23 04:29 2026-05-22 Show GitHub Exploit DB Packet Storm
2156 5.4 MEDIUM
Network
mattermost mattermost_server Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an authenticated Mattermost user to g… CWE-863
 Incorrect Authorization
CVE-2026-28735 2026-05-23 04:28 2026-05-23 Show GitHub Exploit DB Packet Storm
2157 6.4 MEDIUM
Network
concretecms concrete_cms For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 (suspended, banned, terminated employee) can still authenticate via OAuth and r… CWE-1287
 Improper Validation of Specified Type of Input
CVE-2026-7887 2026-05-23 04:21 2026-05-22 Show GitHub Exploit DB Packet Storm
2158 - - - authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, authenticated non-admin users with at least one OAuth2 access token can retrieve the c… CWE-200
CWE-863
Information Exposure
 Incorrect Authorization
CVE-2026-40166 2026-05-23 04:19 2026-05-23 Show GitHub Exploit DB Packet Storm
2159 8.1 HIGH
Network
- - authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, the PATCH /api/v3/core/users/{pk}/ API allows a caller with change_user on a target us… CWE-269
 Improper Privilege Management
CVE-2026-40172 2026-05-23 04:19 2026-05-23 Show GitHub Exploit DB Packet Storm
2160 4.3 MEDIUM
Network
concretecms concrete_cms Concrete CMS 9.5.0 and below is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameter which can lead to file permission bypass. The `AddMessage` and `UpdateMessage` conversation … CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-7886 2026-05-23 04:19 2026-05-22 Show GitHub Exploit DB Packet Storm