Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202501	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4156	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

202502	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4155	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

202503	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4154	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

202504	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4153	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

202505	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4152	2016-08-30 17:01	2016-06-16	Show	GitHub Exploit DB Packet Storm

202506	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4151	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

202507	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4150	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

202508	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4149	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

202509	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4148	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

202510	8.8	重要 Network	マイクロソフトアドビシステムズ Google レッドハット	-	Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player における脆弱性	CWE-noinfo 情報不足	CVE-2016-4147	2016-08-30 17:00	2016-06-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2141	6.5	MEDIUM Network	-	-	nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint (POST/nova-vendor/nova-toggle/toggle/{resource}/{resourceId}) was protected only by web + auth:<guard>…	CWE-285 Improper Authorization	CVE-2026-42202	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

2142	2.4	LOW Network	-	-	Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Prior to 2.9.3, a server-side request forgery (SSRF) vulnerability exists in Geyser’s handling of Bedrock player hea…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42188	2026-05-14 01:32	2026-05-12	Show	GitHub Exploit DB Packet Storm

2143	-		-	-	AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. In AutoGPT, the execution process is recorded to the c…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2025-32425	2026-05-14 01:32	2026-05-14	Show	GitHub Exploit DB Packet Storm

2144	8.8	HIGH Network	-	-	jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed…	CWE-88 CWE-602 Argument Injection Client-Side Enforcement of Server-Side Security	CVE-2026-42266	2026-05-14 01:32	2026-05-14	Show	GitHub Exploit DB Packet Storm

2145	-		-	-	jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlink…	CWE-79 Cross-site Scripting	CVE-2026-42557	2026-05-14 01:32	2026-05-14	Show	GitHub Exploit DB Packet Storm

2146	5.3	MEDIUM Network	-	-	linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID. Prior to 1.8.1, platform/chrome/js/platform-chrome.js:69-88 registers a single declarativeNetRequest rule whose urlFilter i…	CWE-284 CWE-436 Improper Access Control Interpretation Conflict	CVE-2026-42177	2026-05-14 01:31	2026-05-13	Show	GitHub Exploit DB Packet Storm

2147	8.1	HIGH Network	-	-	An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system. Note: Software versions which have re…	CWE-22 Path Traversal	CVE-2026-20916	2026-05-14 01:27	2026-05-14	Show	GitHub Exploit DB Packet Storm

2148	6.8	MEDIUM Network	-	-	When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cros…	CWE-35 Path Traversal: '.../...//'	CVE-2026-24464	2026-05-14 01:27	2026-05-14	Show	GitHub Exploit DB Packet Storm

2149	4.4	MEDIUM Local	-	-	When BIG-IP DNS is provisioned, a vulnerability exists in the gtm_add and bigip_add iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is als…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-28758	2026-05-14 01:27	2026-05-14	Show	GitHub Exploit DB Packet Storm

2150	8.7	HIGH Network	-	-	A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running ar…	CWE-250 Execution with Unnecessary Privileges	CVE-2026-32643	2026-05-14 01:27	2026-05-14	Show	GitHub Exploit DB Packet Storm