Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201531 8.8 重要
Network 		The PHP Group - PHP の ext/phar/dirstream.c の phar_make_dirstream 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-4343 2016-10-26 15:27 2016-02-4 Show GitHub Exploit DB Packet Storm
201532 8.8 重要
Network 		The PHP Group - PHP の ext/phar/phar_object.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-4342 2016-10-26 15:26 2016-02-4 Show GitHub Exploit DB Packet Storm
201533 9.8 緊急
Network 		The PHP Group
アップル		 - PHP の ext/mbstring/libmbfl/mbfl/mbfilter.c の mbfl_strcut 関数における整数オーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-4073 2016-10-26 15:26 2016-03-31 Show GitHub Exploit DB Packet Storm
201534 7.5 重要
Network 		The PHP Group
アップル		 - PHP の ext/standard/url.c の php_raw_url_encode 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2016-4070 2016-10-26 15:25 2016-03-31 Show GitHub Exploit DB Packet Storm
201535 9.8 緊急
Network 		The PHP Group
アップル		 - PHP の ext/snmp/snmp.c の php_snmp_error 関数におけるフォーマットストリングの脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4071 2016-10-26 15:24 2016-03-31 Show GitHub Exploit DB Packet Storm
201536 9.8 緊急
Network 		The PHP Group
アップル		 - PHP の Phar エクステンションにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4072 2016-10-26 15:23 2016-03-31 Show GitHub Exploit DB Packet Storm
201537 9.8 緊急
Network 		LibGD project
Debian		 - GD Graphics Library における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2016-3074 2016-10-26 15:22 2016-04-16 Show GitHub Exploit DB Packet Storm
201538 8.1 重要
Network 		オラクル - Oracle Supply Chain Products Suite の Oracle Agile Engineering Data Management における webfileservices に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5518 2016-10-26 14:33 2016-10-18 Show GitHub Exploit DB Packet Storm
201539 5.5 警告
Local 		オラクル - Oracle E-Business Suite の Oracle Applications DBA における AD Utilities に関する脆弱性 CWE-Other
その他 		CVE-2016-5517 2016-10-26 14:32 2016-10-18 Show GitHub Exploit DB Packet Storm
201540 6 警告
Local 		オラクル - Oracle Database Server の Kernel PDB における脆弱性 CWE-noinfo
情報不足 		CVE-2016-5516 2016-10-26 14:28 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2341 6.5 MEDIUM
Network 		- - Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_low allocates a single per-row buffer GifRow sized… CWE-787
 Out-of-bounds Write 		CVE-2026-8669 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2342 7.5 HIGH
Network 		- - Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. CWE-331
 Insufficient Entropy 		CVE-2026-46474 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2343 7.3 HIGH
Network 		- - Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. CWE-331
 Insufficient Entropy 		CVE-2026-8700 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2344 6.5 MEDIUM
Network 		- - Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. CWE-552
 Files or Directories Accessible to External Parties 		CVE-2026-8704 2026-05-19 02:40 2026-05-16 Show GitHub Exploit DB Packet Storm
2345 8.2 HIGH
Network 		- - Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources c… CWE-93
CRLF Injection 		CVE-2026-46720 2026-05-19 02:40 2026-05-18 Show GitHub Exploit DB Packet Storm
2346 9.8 CRITICAL
Network 		- - Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info(… CWE-787
 Out-of-bounds Write 		CVE-2026-8507 2026-05-19 02:40 2026-05-18 Show GitHub Exploit DB Packet Storm
2347 9.8 CRITICAL
Network 		- - Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to Sv… CWE-170
 Improper Null Termination 		CVE-2026-8721 2026-05-19 02:40 2026-05-18 Show GitHub Exploit DB Packet Storm
2348 7.8 HIGH
Local 		- - VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place ma… CWE-428
 Unquoted Search Path or Element 		CVE-2021-47974 2026-05-19 02:38 2026-05-17 Show GitHub Exploit DB Packet Storm
2349 8.4 HIGH
Local 		- - VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craf… CWE-120
Classic Buffer Overflow 		CVE-2018-25328 2026-05-19 02:38 2026-05-17 Show GitHub Exploit DB Packet Storm
2350 6.5 MEDIUM
Network 		- - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.8.6, in standard channels (i.e., channels whose channel.type is neither group nor dm), th… CWE-862
 Missing Authorization 		CVE-2026-44571 2026-05-19 02:36 2026-05-16 Show GitHub Exploit DB Packet Storm