Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201221 9.8 緊急
Network
アドビシステムズ - Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-4266 2016-08-30 11:45 2016-07-7 Show GitHub Exploit DB Packet Storm
201222 9.8 緊急
Network
アドビシステムズ - Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-4265 2016-08-30 11:45 2016-07-7 Show GitHub Exploit DB Packet Storm
201223 9.8 緊急
Network
アドビシステムズ - Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-4119 2016-08-30 11:45 2016-05-5 Show GitHub Exploit DB Packet Storm
201224 6.1 警告
Network
Zimbra - Zimbra Collaboration におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5721 2016-08-30 11:34 2016-08-29 Show GitHub Exploit DB Packet Storm
201225 8.8 重要
Network
Jenkins プロジェクト
レッドハット
- Jenkins の不特定の API エンドポイントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-0792 2016-08-29 18:18 2016-02-24 Show GitHub Exploit DB Packet Storm
201226 9.8 緊急
Network
Jenkins プロジェクト
レッドハット
- Jenkins における CSRF 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2016-0791 2016-08-29 18:17 2016-02-24 Show GitHub Exploit DB Packet Storm
201227 5.3 警告
Network
Jenkins プロジェクト
レッドハット
- Jenkins における API トークンを特定される脆弱性 CWE-200
CWE-Other
CVE-2016-0790 2016-08-29 18:16 2016-02-24 Show GitHub Exploit DB Packet Storm
201228 6.1 警告
Network
Jenkins プロジェクト
レッドハット
- Jenkins の CLI コマンドのドキュメンテーションにおける CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2016-0789 2016-08-29 18:16 2016-02-24 Show GitHub Exploit DB Packet Storm
201229 9.8 緊急
Network
Jenkins プロジェクト
レッドハット
- Jenkins のリモーティングモジュールにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0788 2016-08-29 18:15 2016-02-24 Show GitHub Exploit DB Packet Storm
201230 6.5 警告
Network
レッドハット
Debian
openSUSE project
SUSE
Google
- Google Chrome の拡張バインディングの extensions/renderer/resources/binding.js における任意のモジュールをロードされる脆弱性 CWE-200
情報漏えい
CVE-2016-1698 2016-08-29 18:15 2016-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1011 9.9 CRITICAL
Network
- - Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on … New CWE-863
 Incorrect Authorization
CVE-2026-41050 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1012 - - - The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the sy… New CWE-250
 Execution with Unnecessary Privileges
CVE-2026-25710 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1013 - - - The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44931 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1014 8.8 HIGH
Adjacent
- - A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim… New CWE-79
Cross-site Scripting
CVE-2026-23819 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1015 7.2 HIGH
Network
- - A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environme… New CWE-78
OS Command 
CVE-2026-23820 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1016 7.2 HIGH
Network
- - A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Su… New CWE-78
OS Command 
CVE-2026-23821 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1017 5.3 MEDIUM
Network
- - A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an at… New CWE-776
XML Entity Expansion
CVE-2026-23822 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1018 7.2 HIGH
Network
- - A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacke… New CWE-77
Command Injection
CVE-2026-23823 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1019 7.5 HIGH
Network
- - Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network mess… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-23824 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1020 9.1 CRITICAL
Network
- - Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data… New - CVE-2025-11159 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm