Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201501 7.5 重要
Network
Pivotal Software, Inc. - Pivotal Cloud Foundry 用 RabbitMQ のメトリックコレクションコンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0929 2016-09-26 15:54 2016-07-15 Show GitHub Exploit DB Packet Storm
201502 7.4 重要
Network
Pivotal Software, Inc. - Pivotal Cloud Foundry Elastic Runtime におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2016-0928 2016-09-26 15:54 2016-06-29 Show GitHub Exploit DB Packet Storm
201503 6.1 警告
Network
Pivotal Software, Inc. - Pivotal Cloud Foundry Ops Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0927 2016-09-26 15:54 2016-06-23 Show GitHub Exploit DB Packet Storm
201504 9.8 緊急
Network
Pivotal Software, Inc. - Pivotal Cloud Foundry Ops Manager における脆弱性 CWE-310
暗号の問題
CVE-2016-0897 2016-09-26 15:54 2016-06-24 Show GitHub Exploit DB Packet Storm
201505 9.8 緊急
Network
Pivotal Software, Inc. - Pivotal Cloud Foundry Ops Manager におけるセッションの認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2016-0883 2016-09-26 15:54 2016-02-3 Show GitHub Exploit DB Packet Storm
201506 8.6 重要
Local
Rockwell Automation - 複数の Rockwell Automation RSLogix 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5814 2016-09-26 14:44 2016-09-15 Show GitHub Exploit DB Packet Storm
201507 7.5 重要
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-6537 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
201508 9.8 緊急
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアの /setup URI におけるページのアクセス制限を回避される脆弱性 CWE-264
CWE-Other
CVE-2016-6536 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
201509 9.8 緊急
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアにおける root アクセス権を取得される脆弱性 CWE-Other
その他
CVE-2016-6535 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
201510 5.9 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA BSAFE Micro Edition Suite のクライアントにおける暗号保護メカニズムを破られる脆弱性 CWE-Other
その他
CVE-2016-0923 2016-09-26 11:47 2016-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1511 5.4 MEDIUM
Network
- - An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a crafted GET request. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2023-30059 2026-05-14 00:48 2026-05-13 Show GitHub Exploit DB Packet Storm
1512 6.5 MEDIUM
Network
- - GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method. During project execution, when the system… CWE-78
OS Command 
CVE-2026-31246 2026-05-14 00:47 2026-05-12 Show GitHub Exploit DB Packet Storm
1513 7.5 HIGH
Network
- - Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend uses etree.parse() to parse XML files without disabling entity resolution. An attacker can craf… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-31247 2026-05-14 00:47 2026-05-12 Show GitHub Exploit DB Packet Storm
1514 7.5 HIGH
Network
- - Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring() without disabli… CWE-776
XML Entity Expansion
CVE-2026-31248 2026-05-14 00:47 2026-05-12 Show GitHub Exploit DB Packet Storm
1515 9.8 CRITICAL
Network
- - Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's… CWE-121
Stack-based Buffer Overflow
CVE-2026-32661 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
1516 7.8 HIGH
Local
- - Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer,… CWE-427
 Uncontrolled Search Path Element
CVE-2026-44612 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
1517 6.5 MEDIUM
Network
- - ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of… CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-25107 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
1518 7.2 HIGH
Network
- - ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary … CWE-78
OS Command 
CVE-2026-35506 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
1519 9.8 CRITICAL
Network
- - ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication. CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-40621 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
1520 9.8 CRITICAL
Network
- - ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter. If processing a crafted request, an arbitrary OS command may be executed. No authenticati… CWE-78
OS Command 
CVE-2026-42062 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm