Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202481 6.5 警告
Network 		Huawei - 複数の Huawei アクセス・コントローラ製品のソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6824 2016-09-26 17:53 2016-08-17 Show GitHub Exploit DB Packet Storm
202482 7.5 重要
Network 		Huawei - 複数の Huawei USG 製品のソフトウェアの AAA モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-6669 2016-09-26 17:53 2016-08-10 Show GitHub Exploit DB Packet Storm
202483 7.5 重要
Adjacent 		Huawei - Huawei WS331a ルータのソフトウェアの管理インターフェースにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2016-6159 2016-09-26 17:53 2016-09-7 Show GitHub Exploit DB Packet Storm
202484 6.1 警告
Network 		Huawei - Huawei WS331a ルータのソフトウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-6158 2016-09-26 17:53 2016-09-7 Show GitHub Exploit DB Packet Storm
202485 6.7 警告
Local 		Xen プロジェクト - Xen の FIFO イベントチャネルコードにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7154 2016-09-26 17:31 2016-09-8 Show GitHub Exploit DB Packet Storm
202486 4.1 警告
Local 		Xen プロジェクト - Xen におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-7094 2016-09-26 17:31 2016-09-8 Show GitHub Exploit DB Packet Storm
202487 8.2 重要
Local 		Xen プロジェクト - Xen におけるハイパーバイザのメモリを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-7093 2016-09-26 17:31 2016-09-8 Show GitHub Exploit DB Packet Storm
202488 8.2 重要
Local 		Xen プロジェクト - Xen の arch/x86/mm.c の get_page_from_l3e 関数におけるホスト OS の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-7092 2016-09-26 17:31 2016-09-8 Show GitHub Exploit DB Packet Storm
202489 8.4 重要
Local 		レッドハット - Red Hat QuickStart Cloud Installer のキックスタートファイルにおける平文パスワードを特定される脆弱性 CWE-Other
その他 		CVE-2016-6340 2016-09-26 17:14 2016-08-25 Show GitHub Exploit DB Packet Storm
202490 8.4 重要
Local 		レッドハット - Red Hat QuickStart Cloud Installer におけるデプロイされたシステムの root パスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6322 2016-09-26 17:14 2016-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2671 8.1 HIGH
Network 		fit2cloud sqlbot SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.8.0, SQLBot contains a Cross-Workspace IDOR (Insecure Direct Object Reference) and Authorization Bypass … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-42463 2026-05-16 02:34 2026-05-14 Show GitHub Exploit DB Packet Storm
2672 9.1 CRITICAL
Network 		opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the XMLRPC method opnsense.restore_config_section fails to sanitize user supplied input leading to Remote Code Execution. T… CWE-88
Argument Injection 		CVE-2026-44193 2026-05-16 02:30 2026-05-14 Show GitHub Exploit DB Packet Storm
2673 4.7 MEDIUM
Network 		lfprojects mcp_registry The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audienc… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-44428 2026-05-16 02:23 2026-05-15 Show GitHub Exploit DB Packet Storm
2674 9.1 CRITICAL
Network 		opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileg… CWE-78
OS Command  		CVE-2026-44194 2026-05-16 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm
2675 6.5 MEDIUM
Network 		shellhub shellhub ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated u… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-44423 2026-05-16 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
2676 7.5 HIGH
Network 		zitadel zitadel ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to pro… CWE-90
LDAP Injection 		CVE-2026-44671 2026-05-16 02:15 2026-05-15 Show GitHub Exploit DB Packet Storm
2677 6.5 MEDIUM
Network 		frappe erpnext ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyo… CWE-862
 Missing Authorization 		CVE-2026-44448 2026-05-16 01:20 2026-05-14 Show GitHub Exploit DB Packet Storm
2678 9.1 CRITICAL
Network 		opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell scrip… CWE-88
Argument Injection 		CVE-2026-45158 2026-05-16 01:19 2026-05-14 Show GitHub Exploit DB Packet Storm
2679 6.5 MEDIUM
Network 		opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication fa… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-44195 2026-05-16 01:06 2026-05-14 Show GitHub Exploit DB Packet Storm
2680 9.8 CRITICAL
Network 		apache tomcat Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0… CWE-20
 Improper Input Validation  		CVE-2026-41293 2026-05-16 00:57 2026-05-13 Show GitHub Exploit DB Packet Storm