Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202001 6.5 警告
Network
kernel.org
オラクル
- Linux-PAM の pam_unix モジュールの _unix_run_helper_binary 関数におけるユーザ名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2015-3238 2016-05-31 11:52 2015-06-15 Show GitHub Exploit DB Packet Storm
202002 7.5 重要
Network
Apache Software Foundation
オラクル
- Apache ActiveMQ の broker/TransportConnection.java の processControlCommand 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3576 2016-05-31 11:50 2014-08-14 Show GitHub Exploit DB Packet Storm
202003 7.5 重要
Network
インテル
オラクル
- IPMI の仕様におけるパスワードハッシュを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-4786 2016-05-31 11:49 2013-07-8 Show GitHub Exploit DB Packet Storm
202004 5.3 警告
Network
Mort Bay Consulting
オラクル
- Jetty におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-310
暗号の問題
CVE-2011-4461 2016-05-31 11:48 2011-12-30 Show GitHub Exploit DB Packet Storm
202005 4.3 警告 OpenSSL Project
オラクル
- OpenSSL の ssl/s3_clnt.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2015-3196 2016-05-31 11:02 2015-12-3 Show GitHub Exploit DB Packet Storm
202006 5 警告 OpenSSL Project
オラクル
- OpenSSL の ssl/s3_clnt.c の ssl3_get_key_exchange 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2015-1794 2016-05-31 11:02 2015-12-3 Show GitHub Exploit DB Packet Storm
202007 9.8 緊急
Network
SolarWinds - DameWare Mini Remote Control にスタックバッファオーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2016-2345 2016-05-30 16:43 2016-03-17 Show GitHub Exploit DB Packet Storm
202008 6.5 警告
Network
シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの XML パーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-399
CVE-2016-1385 2016-05-30 16:11 2016-05-17 Show GitHub Exploit DB Packet Storm
202009 6.1 警告
Network
Huawei - 複数の Huawei スマートフォンのソフトウェアの電子メールアプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4575 2016-05-30 16:08 2016-05-7 Show GitHub Exploit DB Packet Storm
202010 7.8 重要
Local
Huawei - Huawei Mate 8 の Wi-Fi ドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3681 2016-05-30 16:08 2016-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 3.1 LOW
Network
google chrome Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted … New CWE-352
CWE-1021
 Origin Validation Error
 Improper Restriction of Rendered UI Layers or Frames
CVE-2026-8022 2026-05-8 00:15 2026-05-7 Show GitHub Exploit DB Packet Storm
982 5.5 MEDIUM
Local
- - Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can be triggered by crafted IGES or STEP files. These issues include an out-of-bound… Update CWE-125
Out-of-bounds Read
CVE-2026-42481 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
983 7.5 HIGH
Network
- - AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD… Update CWE-121
Stack-based Buffer Overflow
CVE-2026-37530 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
984 9.8 CRITICAL
Network
- - Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows attackers to write to arb… Update CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-37534 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
985 10.0 CRITICAL
Network
- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers t… Update CWE-121
Stack-based Buffer Overflow
CVE-2026-37541 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
986 8.8 HIGH
Network
- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a … Update CWE-121
Stack-based Buffer Overflow
CVE-2026-42468 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
987 8.6 HIGH
Network
- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to… Update CWE-121
Stack-based Buffer Overflow
CVE-2026-42469 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
988 6.1 MEDIUM
Network
- - Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in the `/painel/gateways.php/error` endpoint does not properly sanitize user-suppli… Update CWE-79
Cross-site Scripting
CVE-2025-69606 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
989 6.5 MEDIUM
Network
- - A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request. Update CWE-77
Command Injection
CVE-2026-26461 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
990 7.5 HIGH
Network
- - An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) … Update CWE-787
 Out-of-bounds Write
CVE-2026-37457 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm