Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201651 6.5 警告
Network 		マイクロソフト - 複数の Microsoft Windows 製品の GDI における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-0168 2016-05-13 15:16 2016-05-10 Show GitHub Exploit DB Packet Storm
201652 7.8 重要
Local 		マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-0198 2016-05-13 14:33 2016-05-10 Show GitHub Exploit DB Packet Storm
201653 8.8 重要
Network 		マイクロソフト - 複数の Microsoft 製品の Windows フォント ライブラリにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-0183 2016-05-13 14:33 2016-05-10 Show GitHub Exploit DB Packet Storm
201654 7.8 重要
Local 		マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-0140 2016-05-13 14:33 2016-05-10 Show GitHub Exploit DB Packet Storm
201655 7.8 重要
Local 		マイクロソフト - Microsoft Office 2013 および 2016 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-0126 2016-05-13 14:33 2016-05-10 Show GitHub Exploit DB Packet Storm
201656 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品の Media Center における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0185 2016-05-13 13:56 2016-05-10 Show GitHub Exploit DB Packet Storm
201657 8.8 重要
Network 		Debian
Mercurial		 - Mercurial の convert エクステンションにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-3105 2016-05-12 17:38 2016-05-1 Show GitHub Exploit DB Packet Storm
201658 7.8 重要
Local 		w1.fi
Google		 - wpa_supplicant における任意のライブラリのロードを誘発される脆弱性 CWE-Other
その他 		CVE-2016-4477 2016-05-12 16:44 2016-05-2 Show GitHub Exploit DB Packet Storm
201659 7.5 重要
Network 		w1.fi - hostapd および wpa_supplicant におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4476 2016-05-12 16:44 2016-05-2 Show GitHub Exploit DB Packet Storm
201660 7 重要
Local 		Google - Android の Conscrypt の OpenSSLCipher.java におけるメッセージの認証を偽造される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2462 2016-05-12 16:44 2016-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
591 3.5 LOW
Network 		- - A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNotic… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7677 2026-05-6 04:15 2026-05-3 Show GitHub Exploit DB Packet Storm
592 6.3 MEDIUM
Network 		- - A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes … New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7690 2026-05-6 04:14 2026-05-3 Show GitHub Exploit DB Packet Storm
593 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. Impacted is the function set_sys_cmd of the file /cgi-bin/adm.cgi. Such manipulation of the argument command lea… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7691 2026-05-6 04:14 2026-05-3 Show GitHub Exploit DB Packet Storm
594 6.3 MEDIUM
Network 		- - A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. The affected element is the function ping_ddns of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument DDNS re… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7692 2026-05-6 04:14 2026-05-3 Show GitHub Exploit DB Packet Storm
595 6.3 MEDIUM
Network 		- - A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoView… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7678 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm
596 7.3 HIGH
Network 		- - A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/servi… New CWE-287
Improper Authentication 		CVE-2026-7679 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm
597 7.2 HIGH
Network 		- - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_form() function in versions up to,… New CWE-79
Cross-site Scripting 		CVE-2026-5063 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm
598 4.3 MEDIUM
Network 		- - A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipu… New CWE-22
Path Traversal 		CVE-2026-7680 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm
599 6.5 MEDIUM
Network 		- - A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the comp… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-7681 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm
600 5.3 MEDIUM
Network 		- - A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activa… New CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-7686 2026-05-6 04:13 2026-05-3 Show GitHub Exploit DB Packet Storm