Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201501 7.1 重要
Local
ヒューレット・パッカード・エンタープライズ - HPE System Management Homepage における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2015 2016-09-7 17:33 2016-05-6 Show GitHub Exploit DB Packet Storm
201502 4.3 警告 jQuery
ヒューレット・パッカード・エンタープライズ
- jQuery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4969 2016-09-7 17:33 2011-09-1 Show GitHub Exploit DB Packet Storm
201503 5 警告 日立
Apache Software Foundation
ヒューレット・パッカード・エンタープライズ
- Apache HTTP Server におけるサービス運用妨害 (デーモン停止) の脆弱性 CWE-399
リソース管理の問題
CVE-2007-6750 2016-09-7 17:33 2011-12-27 Show GitHub Exploit DB Packet Storm
201504 7.8 危険 ヒューレット・パッカード
Apache Software Foundation
オラクル
- Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-0230 2016-09-7 16:52 2014-06-24 Show GitHub Exploit DB Packet Storm
201505 8.1 重要
Network
シスコシステムズ - Cisco Virtual Media Packager の Media Origination System Suite Software における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2016-6377 2016-09-7 14:14 2016-08-31 Show GitHub Exploit DB Packet Storm
201506 5.3 警告
Network
アップル
Google
マイクロソフト
Mozilla Foundation
Opera Software ASA
- HTTP/2 プロトコルにおける平文データを取得される脆弱性 CWE-200
情報漏えい
CVE-2016-7153 2016-09-7 13:58 2016-08-4 Show GitHub Exploit DB Packet Storm
201507 5.3 警告
Network
アップル
Google
マイクロソフト
Mozilla Foundation
Opera Software ASA
- HTTPS プロトコルにおける平文データを取得される脆弱性 CWE-200
情報漏えい
CVE-2016-7152 2016-09-7 13:58 2016-08-4 Show GitHub Exploit DB Packet Storm
201508 7.8 重要
Local
シスコシステムズ - Cisco WebEx Meetings Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1464 2016-09-7 12:05 2016-08-31 Show GitHub Exploit DB Packet Storm
201509 5.5 警告
Local
シスコシステムズ - Cisco WebEx Meetings Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1415 2016-09-7 12:05 2016-08-31 Show GitHub Exploit DB Packet Storm
201510 9.8 緊急
Network
MISP project - Malware Information Sharing Platform における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2015-5721 2016-09-7 11:49 2015-07-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1491 - - - Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable l… CWE-190
 Integer Overflow or Wraparound
CVE-2026-20753 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1492 - - - Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combin… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-20754 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1493 - - - Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications may allow an escalation of privilege. Unpr… CWE-427
 Uncontrolled Search Path Element
CVE-2026-20772 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1494 - - - Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow an escalation of privilege. System software adversar… CWE-120
Classic Buffer Overflow
CVE-2026-20794 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1495 - - - Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary w… CWE-787
 Out-of-bounds Write
CVE-2026-20879 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1496 - - - Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user co… CWE-284
Improper Access Control
CVE-2026-20887 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1497 5.5 MEDIUM
Adjacent
- - PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication. CWE-93
CRLF Injection
CVE-2026-35504 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1498 8.2 HIGH
Adjacent
- - PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions … CWE-863
 Incorrect Authorization
CVE-2026-26289 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1499 5.7 MEDIUM
Adjacent
- - PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions. CWE-863
 Incorrect Authorization
CVE-2026-33570 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1500 6.3 MEDIUM
Adjacent
- - PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups. CWE-863
 Incorrect Authorization
CVE-2026-35555 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm