Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202831 4.3 警告 IBM - IBM Security Access Manager for Web および Security Access Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8531 2016-02-25 13:43 2015-12-8 Show GitHub Exploit DB Packet Storm
202832 7.6 危険 オラクル - Oracle Java SE における Install に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0603 2016-02-25 12:27 2016-02-5 Show GitHub Exploit DB Packet Storm
202833 4.3 警告 OpenJPEG project - OpenJPEG の opj_tgt_reset 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-1924 2016-02-25 11:27 2016-01-18 Show GitHub Exploit DB Packet Storm
202834 5 警告 The Go Project - Go の math/big ライブラリ内の Int.Exp Montgomery コードにおける RSA 秘密鍵を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-8618 2016-02-25 11:22 2015-12-7 Show GitHub Exploit DB Packet Storm
202835 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-0982 2016-02-25 10:48 2016-02-9 Show GitHub Exploit DB Packet Storm
202836 6.5 警告 Mattel, Inc - フィッシャープライス Smart Toy 向けウェブサービスにおいて認証なしで API を呼び出せる脆弱性 CWE-287
不適切な認証 		CVE-2015-8269 2016-02-24 16:59 2016-02-2 Show GitHub Exploit DB Packet Storm
202837 6 警告 Roundcube.net - Roundcube の program/include/rcmail_output_html.php の set_skin 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-8770 2016-02-24 15:13 2015-12-26 Show GitHub Exploit DB Packet Storm
202838 10 危険 Fr. Sauter AG - Sauter EY-WS505F0x0 moduWeb Vision における重要な情報を取得される脆弱性 CWE-200
CWE-255
CVE-2015-7915 2016-02-24 11:11 2015-10-22 Show GitHub Exploit DB Packet Storm
202839 9.3 危険 Fr. Sauter AG - Sauter EY-WS505F0x0 moduWeb Vision における認証を回避される脆弱性 CWE-287
CWE-Other
CVE-2015-7914 2016-02-24 11:11 2015-10-22 Show GitHub Exploit DB Packet Storm
202840 9.3 危険 The Document Foundation - LibreOffice におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-0795 2016-02-24 11:08 2016-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
401 6.3 MEDIUM
Local 		- - A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hard… New CWE-1241
 Use of Predictable Algorithm in Random Number Generator 		CVE-2026-6420 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
402 3.1 LOW
Network 		- - HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit b… New CWE-80
Basic XSS 		CVE-2025-59854 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
403 3.1 LOW
Network 		- - HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow an attacker to gain insights into the appl… New CWE-209
Information Exposure Through an Error Message 		CVE-2025-59853 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
404 3.7 LOW
Network 		- - HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise t… New CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2025-59852 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
405 3.7 LOW
Network 		- - HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and … New - CVE-2025-59851 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
406 5.3 MEDIUM
Network 		- - HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could al… New CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2025-31970 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
407 5.2 MEDIUM
Local 		- - There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traver… New CWE-269
 Improper Privilege Management 		CVE-2026-40001 2026-05-6 19:16 2026-05-6 Show GitHub Exploit DB Packet Storm
408 8.8 HIGH
Network 		- - A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0. An authenticated user with System Setting permissions can execute arbitrary commands on the server b… New CWE-94
Code Injection 		CVE-2026-7841 2026-05-6 17:16 2026-05-6 Show GitHub Exploit DB Packet Storm
409 - - - The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized acti… New CWE-79
Cross-site Scripting 		CVE-2026-23928 2026-05-6 17:16 2026-05-6 Show GitHub Exploit DB Packet Storm
410 - - - A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle datab… New CWE-522
 Insufficiently Protected Credentials 		CVE-2026-23927 2026-05-6 17:16 2026-05-6 Show GitHub Exploit DB Packet Storm