Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201831 9.8 緊急
Network
GNU Project
openSUSE project
- GNU C Library の sunrpc/clnt_udp.c の clntudp_call 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-4429 2016-06-14 12:23 2016-05-23 Show GitHub Exploit DB Packet Storm
201832 7.5 重要
Network
GNU Project
openSUSE project
- GNU C Library の sysdeps/posix/getaddrinfo.c の getaddrinfo 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-3706 2016-06-14 12:23 2016-04-29 Show GitHub Exploit DB Packet Storm
201833 9.8 緊急
Network
DELL EMC (旧 EMC Corporation) - EMC NetWorker における任意のコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2016-0916 2016-06-14 12:04 2016-06-8 Show GitHub Exploit DB Packet Storm
201834 8.8 重要
Local
DELL EMC (旧 EMC Corporation) - EMC Data Domain オペレーティングシステムにおける任意のアカウントをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0910 2016-06-14 12:04 2016-06-8 Show GitHub Exploit DB Packet Storm
201835 8.1 重要
Adjacent
シスコシステムズ - Cisco Aironet アクセスポイントデバイスのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1419 2016-06-14 11:47 2016-06-9 Show GitHub Exploit DB Packet Storm
201836 7.8 重要
Local
シスコシステムズ - 複数の Cisco Aironet アクセスポイントのソフトウェアにおける Linux の root アクセス権を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1418 2016-06-13 17:22 2016-06-6 Show GitHub Exploit DB Packet Storm
201837 9.8 緊急
Network
General Electric Company - General Electric Multilink スイッチのファームウェアにおける構成設定を変更される脆弱性 CWE-Other
その他
CVE-2016-2310 2016-06-13 17:07 2016-06-7 Show GitHub Exploit DB Packet Storm
201838 9.8 緊急
Network
VideoLAN
Debian
- VideoLAN VLC media player の modules/codec/adpcm.c の DecodeAdpcmImaQT 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5108 2016-06-13 16:52 2016-06-7 Show GitHub Exploit DB Packet Storm
201839 8.8 重要
Network
- HPE Project and Portfolio Management Center における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-4370 2016-06-13 16:29 2016-06-8 Show GitHub Exploit DB Packet Storm
201840 8.8 重要
Network
ヒューレット・パッカード・エンタープライズ - HPE Discovery and Dependency Mapping Inventory における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-4369 2016-06-13 16:29 2016-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
871 - - - A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. When processing SVG marker references, the renderer retrieves a node by its id at… New CWE-122
CWE-843
Heap-based Buffer Overflow
Type Confusion
CVE-2026-6210 2026-05-8 00:10 2026-05-6 Show GitHub Exploit DB Packet Storm
872 6.5 MEDIUM
Network
- - Traccar is an open source GPS tracking system. In versions between 6.11.1 and 6.13.0, the CSV export functionality writes position data, including user-controlled device and computed attributes, to C… New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2026-27644 2026-05-8 00:09 2026-05-5 Show GitHub Exploit DB Packet Storm
873 5.4 MEDIUM
Network
- - Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the KML and GPX export functionality writes device names to XML output without proper … New CWE-91
Blind XPath Injection
CVE-2026-27693 2026-05-8 00:09 2026-05-5 Show GitHub Exploit DB Packet Storm
874 5.4 MEDIUM
Network
- - Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the email notification templates insert user-controlled device, geofence, and driver n… New CWE-79
Cross-site Scripting
CVE-2026-27694 2026-05-8 00:09 2026-05-5 Show GitHub Exploit DB Packet Storm
875 7.5 HIGH
Network
- - NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the queryParentSQL() function in the core database package co… New CWE-89
SQL Injection
CVE-2026-41640 2026-05-8 00:08 2026-05-7 Show GitHub Exploit DB Packet Storm
876 - - - Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._red… New CWE-601
Open Redirect
CVE-2025-61669 2026-05-8 00:07 2026-05-6 Show GitHub Exploit DB Packet Storm
877 - - - Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_d… New CWE-22
Path Traversal
CVE-2026-35397 2026-05-8 00:07 2026-05-6 Show GitHub Exploit DB Packet Storm
878 - - - Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pa… New CWE-777
CVE-2026-40110 2026-05-8 00:07 2026-05-6 Show GitHub Exploit DB Packet Storm
879 - - - In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 an… New CWE-79
Cross-site Scripting
CVE-2026-40171 2026-05-8 00:07 2026-05-7 Show GitHub Exploit DB Packet Storm
880 - - - OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnera… New CWE-22
Path Traversal
CVE-2026-40075 2026-05-8 00:06 2026-05-6 Show GitHub Exploit DB Packet Storm