Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201191 2.1
Physics
Google - Android の internal/telephony/SMSDispatcher.java における Factory Reset Protection 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3888 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201192 7.8 重要
Local
Google - Android の providers/settings/SettingsProvider.java における VPN の常時接続状態を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3887 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201193 6.8 警告
Physics
Google - Android の System UI Tuner の systemui/statusbar/phone/QuickStatusBarHeader.java における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3886 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201194 5.5 警告
Local
Google - Android の Notification Manager Service におけるメソッドの呼び出しの制限を回避される脆弱性 CWE-Other
その他
CVE-2016-3884 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201195 5.5 警告
Local
Google - Android のメディアサーバの libvpx の vp9/vp9_dx_iface.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-3881 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201196 5.5 警告
Local
Google - Android のメディアサーバの libstagefright の rtsp/ASessionDescription.cpp におけるバッファオーバーフローの脆弱性 CWE-Other
その他
CVE-2016-3880 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201197 5.5 警告
Local
Google - Android のメディアサーバの arm-wt-22k/lib_src/eas_mdls.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3879 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201198 5.5 警告
Local
Google - Android のメディアサーバの decoder/ih264d_api.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3878 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201199 9.8 緊急
Network
Google - Android における脆弱性 CWE-noinfo
情報不足
CVE-2016-3877 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
201200 6.8 警告
Physics
Google - Android の providers/settings/SettingsProvider.java における SAFE_BOOT_DISALLOWED 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3876 2016-09-14 16:46 2016-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1281 8.7 HIGH
Network
- - A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running ar… CWE-250
 Execution with Unnecessary Privileges
CVE-2026-32643 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1282 8.7 HIGH
Network
- - A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher priv… CWE-250
 Execution with Unnecessary Privileges
CVE-2026-32673 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1283 5.3 MEDIUM
Network
- - When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD pack… CWE-410
 Insufficient Resource Pool
CVE-2026-34019 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1284 8.7 HIGH
Network
- - When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a securit… CWE-78
OS Command 
CVE-2026-34176 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1285 6.5 MEDIUM
Network
- - An authenticated iControl SOAP user may be able to obtain information of other accounts.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. CWE-266
 Incorrect Privilege Assignment
CVE-2026-35062 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1286 7.5 HIGH
Network
- - When the BIG-IP Configuration utility is configured to use Lightweight Directory Access Protocol (LDAP) authentication, undisclosed traffic can cause the httpd process to exhaust the available file d… CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2026-39455 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1287 7.5 HIGH
Network
- - When a BIG-IP DNS profile enabled with DNS cache is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which… CWE-824
 Access of Uninitialized Pointer
CVE-2026-39458 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1288 7.2 HIGH
Network
- - A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running … CWE-272
 Least Privilege Violation
CVE-2026-39459 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1289 7.5 HIGH
Network
- - When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.  Note: Software versions which have reached End o… CWE-252
 Unchecked Return Value
CVE-2026-40060 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm
1290 8.7 HIGH
Network
- - When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with the Resource Administrator or… CWE-77
Command Injection
CVE-2026-40061 2026-05-14 01:27 2026-05-14 Show GitHub Exploit DB Packet Storm