Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202931 4 警告 シスコシステムズ - Cisco Unified Communications Manager における重要なデータベースのテーブル名およびエンティティ名の情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-1317 2016-02-17 14:04 2016-02-8 Show GitHub Exploit DB Packet Storm
202932 6.5 警告 シスコシステムズ - Cisco Unified Communications Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-1308 2016-02-17 14:04 2016-02-3 Show GitHub Exploit DB Packet Storm
202933 4.3 警告 シスコシステムズ - Cisco Fog Director におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1306 2016-02-17 14:04 2016-02-1 Show GitHub Exploit DB Packet Storm
202934 5.8 警告 アップル - Apple iOS の WebSheet における Cookie を読まれる脆弱性 CWE-200
CWE-Other
CVE-2016-1730 2016-02-17 13:59 2016-01-19 Show GitHub Exploit DB Packet Storm
202935 7.5 危険 アップル - Apple OS X の OSA スクリプトライブラリにおける任意のスクリプトライブラリをロードされる脆弱性 CWE-Other
その他 		CVE-2016-1729 2016-02-17 13:59 2016-01-19 Show GitHub Exploit DB Packet Storm
202936 4.3 警告 アップル - Apple iOS および Safari の Cascading Style Sheets の実装における重要なブラウザの履歴情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-1728 2016-02-17 13:59 2016-01-19 Show GitHub Exploit DB Packet Storm
202937 6.9 警告 アップル - Apple OS X の IOAcceleratorFamily の IOAcceleratorFamily2 インターフェースにおける権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-1718 2016-02-17 13:59 2016-01-19 Show GitHub Exploit DB Packet Storm
202938 7.2 危険 アップル - Apple OS X の AppleGraphicsPowerManagement における権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-1716 2016-02-17 13:59 2016-01-19 Show GitHub Exploit DB Packet Storm
202939 2.1 注意 マイクロソフト - 複数の Microsoft Windows 製品の Kerberos における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-0049 2016-02-17 13:57 2016-02-9 Show GitHub Exploit DB Packet Storm
202940 5 警告 マイクロソフト - 複数の Microsoft Windows 製品の Sync Framework におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0044 2016-02-17 13:57 2016-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 8.1 HIGH
Network 		agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully exploited, an authentic… Update CWE-284
Improper Access Control 		CVE-2026-5780 2026-05-5 23:22 2026-04-28 Show GitHub Exploit DB Packet Storm
82 5.5 MEDIUM
Local 		canonical pdfunite PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmen… Update CWE-120
Classic Buffer Overflow 		CVE-2018-25306 2026-05-5 23:22 2026-04-30 Show GitHub Exploit DB Packet Storm
83 8.8 HIGH
Network 		agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the inf… Update CWE-284
Improper Access Control 		CVE-2026-5779 2026-05-5 23:20 2026-04-28 Show GitHub Exploit DB Packet Storm
84 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affects the function get_csrf_whites of the file /cgi/advanced/misc_main.cgi. Such manipulation leads to stack-bas… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-7834 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
85 5.0 MEDIUM
Network 		- - An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved. This is an instance of CWE-269: Improper Privilege Management, an… New CWE-269
 Improper Privilege Management 		CVE-2026-7778 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
86 - - - In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message. New CWE-125
Out-of-bounds Read 		CVE-2026-6918 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
87 7.5 HIGH
Network 		- - The WeePie Cookie Allow plugin for WordPress is vulnerable to SQL Injection via the 'consent' parameter in all versions up to, and including, 3.4.11 due to insufficient escaping on the user supplied … New CWE-89
SQL Injection 		CVE-2026-4304 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
88 7.2 HIGH
Network 		- - OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php) New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-38751 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
89 - - - An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0). The password reset function can be bypassed to set arbitrary passwords for arbitrary accounts if th… New - CVE-2026-34408 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
90 6.5 MEDIUM
Network 		- - Traccar is an open source GPS tracking system. In versions between 6.11.1 and 6.13.0, the CSV export functionality writes position data, including user-controlled device and computed attributes, to C… New CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2026-27644 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm