Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201281 7.5 重要
Network
Foxit Software Inc - Windows 上で稼動する Foxit Reader および PhantomPDF におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-8876 2016-11-4 12:34 2016-10-18 Show GitHub Exploit DB Packet Storm
201282 5.3 警告
Network
Foxit Software Inc - Windows 上で稼動する Foxit Reader および PhantomPDF の ConvertToPDF プラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-8875 2016-11-4 12:34 2016-10-18 Show GitHub Exploit DB Packet Storm
201283 7.8 重要
Local
Foxit Software Inc - Mac および Linux 用 Foxit Reader における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-8856 2016-11-4 12:34 2016-10-18 Show GitHub Exploit DB Packet Storm
201284 6.2 警告
Local
Botan project - Botan の特定のパディングオプションを持つ RSA 暗号解読における平文に復元される脆弱性 CWE-200
情報漏えい
CVE-2016-8871 2016-11-4 12:31 2016-10-28 Show GitHub Exploit DB Packet Storm
201285 4 警告
Local
docker2aci project - docker2aci におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2016-8579 2016-11-4 11:22 2016-10-11 Show GitHub Exploit DB Packet Storm
201286 7.5 重要
Network
Moodle - Moodle における重要な情報を取得される脆弱性 CWE-200
CWE-89
CVE-2016-7919 2016-11-4 10:41 2016-10-6 Show GitHub Exploit DB Packet Storm
201287 8.8 重要
Network
シトリックス・システムズ - Citrix NetScaler ADC における許可されていないリダイレクトの脆弱性 CWE-Other
その他
CVE-2016-9028 2016-11-4 10:09 2016-10-25 Show GitHub Exploit DB Packet Storm
201288 5.5 警告
Local
リアルネットワークス - RealNetworks RealPlayer の qcpfformat.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-9018 2016-11-4 09:42 2016-10-21 Show GitHub Exploit DB Packet Storm
201289 7.5 重要
Network
Artifex Software - Artifex Software MuJS における重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-9017 2016-11-4 09:41 2016-10-25 Show GitHub Exploit DB Packet Storm
201290 6.2 警告
Local
Bitcoin Knots Project - Bitcoin Knots のデバッグコンソールにおける重要な情報を格納される脆弱性 CWE-200
CWE-310
CVE-2016-8889 2016-11-2 17:28 2016-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2201 8.1 HIGH
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permissions) to overwrite existi… CWE-269
CWE-285
CWE-639
CWE-837
 Improper Privilege Management
Improper Authorization
 Authorization Bypass Through User-Controlled Key
 Improper Enforcement of a Single, Unique Action
CVE-2026-42609 2026-05-15 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
2202 8.8 HIGH
Network
arubanetworks arubaos
sd-wan
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo… CWE-77
Command Injection
CVE-2026-44869 2026-05-15 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
2203 1.8 LOW
Physics
- - Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access. CWE-693
 Protection Mechanism Failure
CVE-2026-30904 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2204 7.8 HIGH
Local
- - External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via loca… CWE-73
 External Control of File Name or Path
CVE-2026-30905 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2205 7.8 HIGH
Local
- - Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. CWE-426
 Untrusted Search Path
CVE-2026-30906 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2206 5.4 MEDIUM
Network
- - podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without … CWE-79
Cross-site Scripting
CVE-2026-43644 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2207 3.7 LOW
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments t… CWE-328
 Use of Weak Hash
CVE-2026-44582 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
2208 7.6 HIGH
Network
- - Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls … CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-44516 2026-05-15 03:14 2026-05-15 Show GitHub Exploit DB Packet Storm
2209 - - - The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redi… CWE-601
Open Redirect
CVE-2026-44503 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm
2210 - - - Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, giv… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-44504 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm