Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202851 4.3 警告 Apache Software Foundation - Apache Solr の Admin UI の webapp/web/js/scripts/schema-browser.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8796 2016-02-23 16:20 2015-08-16 Show GitHub Exploit DB Packet Storm
202852 4.3 警告 Apache Software Foundation - Apache Solr の Admin UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8795 2016-02-23 16:20 2015-04-6 Show GitHub Exploit DB Packet Storm
202853 4.3 警告 Roundcube.net - Roundcube の program/include/rcmail.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8793 2016-02-23 16:15 2015-06-5 Show GitHub Exploit DB Packet Storm
202854 6.1 警告 シスコシステムズ - Cisco Industrial Ethernet 2000 デバイス上で稼動する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1330 2016-02-23 13:58 2016-02-15 Show GitHub Exploit DB Packet Storm
202855 10 危険 シスコシステムズ - Cisco RV220W デバイスの Web ベースの管理インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-6319 2016-02-23 12:28 2015-08-17 Show GitHub Exploit DB Packet Storm
202856 4.3 警告 OpenJPEG project - OpenJPEG の opj_j2k_update_image_data 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1923 2016-02-23 11:53 2016-01-18 Show GitHub Exploit DB Packet Storm
202857 4.3 警告
Network
マイクロソフト - Internet Explorer におけるクロスドメイン ポリシーを回避される脆弱性 CWE-Other
その他
CVE-2016-0069 2016-02-23 11:20 2016-02-19 Show GitHub Exploit DB Packet Storm
202858 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 から 11 における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0068 2016-02-23 11:11 2016-02-9 Show GitHub Exploit DB Packet Storm
202859 7.8 危険 アドビシステムズ - Adobe Experience Manager の Dispatcher におけるディスパッチャのルールを回避される脆弱性 CWE-noinfo
情報不足
CVE-2016-0957 2016-02-23 11:09 2016-02-9 Show GitHub Exploit DB Packet Storm
202860 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-0983 2016-02-23 10:26 2016-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 8.1 HIGH
Network
agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully exploited, an authentic… Update CWE-284
Improper Access Control
CVE-2026-5780 2026-05-5 23:22 2026-04-28 Show GitHub Exploit DB Packet Storm
82 5.5 MEDIUM
Local
canonical pdfunite PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmen… Update CWE-120
Classic Buffer Overflow
CVE-2018-25306 2026-05-5 23:22 2026-04-30 Show GitHub Exploit DB Packet Storm
83 8.8 HIGH
Network
agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the inf… Update CWE-284
Improper Access Control
CVE-2026-5779 2026-05-5 23:20 2026-04-28 Show GitHub Exploit DB Packet Storm
84 9.8 CRITICAL
Network
- - A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affects the function get_csrf_whites of the file /cgi/advanced/misc_main.cgi. Such manipulation leads to stack-bas… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-7834 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
85 5.0 MEDIUM
Network
- - An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, an… New CWE-269
 Improper Privilege Management
CVE-2026-7778 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
86 - - - In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message. New CWE-125
Out-of-bounds Read
CVE-2026-6918 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
87 7.5 HIGH
Network
- - The WeePie Cookie Allow plugin for WordPress is vulnerable to SQL Injection via the 'consent' parameter in all versions up to, and including, 3.4.11 due to insufficient escaping on the user supplied … New CWE-89
SQL Injection
CVE-2026-4304 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
88 7.2 HIGH
Network
- - OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php) New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-38751 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
89 - - - An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0). The password reset function can be bypassed to set arbitrary passwords for arbitrary accounts if th… New - CVE-2026-34408 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
90 6.5 MEDIUM
Network
- - Traccar is an open source GPS tracking system. In versions between 6.11.1 and 6.13.0, the CSV export functionality writes position data, including user-controlled device and computed attributes, to C… New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2026-27644 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm