Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201201 4 警告 日立
Canonical
オラクル		 - Oracle Java SE および Java SE Embedded における JMX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0448 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
201202 5 警告 日立
Canonical
オラクル		 - Oracle Java SE および Java SE Embedded における Networking に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0402 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
201203 6.8 警告
Local 		オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-Other
その他 		CVE-2016-5610 2016-11-21 12:23 2016-10-18 Show GitHub Exploit DB Packet Storm
201204 5.5 警告
Local 		ImageMagick
Canonical
レッドハット		 - ImageMagick の LABEL コーダにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2016-3717 2016-11-21 12:02 2016-05-3 Show GitHub Exploit DB Packet Storm
201205 6.3 警告
Local 		ImageMagick
Canonical
レッドハット		 - ImageMagick の HTTP および FTP コーダにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3718 2016-11-21 11:59 2016-05-3 Show GitHub Exploit DB Packet Storm
201206 3.3 低
Local 		ImageMagick
Canonical
レッドハット		 - ImageMagick の MSL コーダにおける任意のファイルを移動される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3716 2016-11-21 11:45 2016-05-3 Show GitHub Exploit DB Packet Storm
201207 6.5 警告
Network 		LibGD project
Debian
openSUSE project		 - GD Graphics Library の gd_tga.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-6214 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
201208 6.5 警告
Network 		LibGD project
Debian
openSUSE project		 - GD Graphics Library の gd_interpolation.c の _gdContributionsAlloc 関数における整数オーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2016-6207 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
201209 6.5 警告
Network 		LibGD project
Debian
openSUSE project		 - GD Graphics Library の gd_gif_out.c の output 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-6161 2016-11-21 11:00 2016-05-14 Show GitHub Exploit DB Packet Storm
201210 6.5 警告
Network 		LibGD project
Debian
openSUSE project		 - GD Graphics Library の gdImageCreateFromTgaCtx 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-6132 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2271 7.8 HIGH
Local 		freebsd freebsd The setcred(2) system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-… CWE-121
Stack-based Buffer Overflow 		CVE-2026-45250 2026-05-22 11:16 2026-05-21 Show GitHub Exploit DB Packet Storm
2272 7.7 HIGH
Network 		- - A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulat… CWE-22
Path Traversal 		CVE-2026-34911 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2273 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-34910 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2274 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an und… CWE-22
Path Traversal 		CVE-2026-34909 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2275 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. CWE-284
Improper Access Control 		CVE-2026-34908 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2276 9.1 CRITICAL
Network 		- - A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-33000 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2277 7.8 HIGH
Local 		mullvad mullvad_vpn Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation during installation or upgrade. The installer… CWE-269
CWE-345
CWE-427
NVD-CWE-noinfo
 Improper Privilege Management
 Insufficient Verification of Data Authenticity
 Uncontrolled Search Path Element 		CVE-2026-32323 2026-05-22 09:04 2026-05-19 Show GitHub Exploit DB Packet Storm
2278 4.3 MEDIUM
Network 		glpi-project glpi GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue… CWE-862
 Missing Authorization 		CVE-2026-32312 2026-05-22 08:57 2026-05-19 Show GitHub Exploit DB Packet Storm
2279 3.5 LOW
Network 		github cli `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users vie… CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences 		CVE-2026-45803 2026-05-22 08:47 2026-05-16 Show GitHub Exploit DB Packet Storm
2280 10.0 CRITICAL
Network 		microsoft azure_local
azure_resource_manager 		Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. CWE-287
NVD-CWE-noinfo
Improper Authentication 		CVE-2026-42822 2026-05-22 08:45 2026-05-19 Show GitHub Exploit DB Packet Storm