Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203001 7.8 重要
Local
Huawei - Huawei UTPS における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-2780 2016-04-28 12:28 2016-03-2 Show GitHub Exploit DB Packet Storm
203002 7.5 重要
Network
Huawei - 複数の Huawei 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-399
CVE-2015-8676 2016-04-28 12:28 2015-12-25 Show GitHub Exploit DB Packet Storm
203003 9.8 緊急
Network
Python Software Foundation - Pillow の libImaging/Resample.c の ImagingResampleHorizontal 関数における整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4009 2016-04-28 12:06 2016-02-4 Show GitHub Exploit DB Packet Storm
203004 7.5 重要
Network
UNINETT
Fedora Project
- mod_auth_mellon の am_read_post_data 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2146 2016-04-28 11:57 2016-03-9 Show GitHub Exploit DB Packet Storm
203005 7.5 重要
Network
UNINETT
Fedora Project
- mod_auth_mellon の am_read_post_data 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2145 2016-04-28 11:57 2016-03-9 Show GitHub Exploit DB Packet Storm
203006 6.2 警告
Local
openSUSE project
LibTIFF
- LibTIFF の gif2tiff.c の readextension 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3186 2016-04-28 11:02 2016-03-20 Show GitHub Exploit DB Packet Storm
203007 7.8 重要
Local
Xen プロジェクト - Linux Kernel の arch/x86/kernel/process_64.c の __switch_to 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3157 2016-04-28 10:56 2016-03-16 Show GitHub Exploit DB Packet Storm
203008 5.5 警告
Local
Google - Android のフレームワークコンポーネントの server/content/ContentService.java における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2426 2016-04-28 09:50 2016-04-4 Show GitHub Exploit DB Packet Storm
203009 5.5 警告
Local
Google - Android の AOSP メールの mail/compose/ComposeActivity.java における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2425 2016-04-28 09:50 2016-04-4 Show GitHub Exploit DB Packet Storm
203010 5.5 警告
Local
Google - Android の SyncStorageEngine の server/content/SyncStorageEngine.java におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2424 2016-04-28 09:50 2016-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By mod… New CWE-862
 Missing Authorization
CVE-2026-8077 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
852 - - - SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality … New CWE-862
 Missing Authorization
CVE-2026-44125 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
853 - - - SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers to execute code vi… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-44126 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
854 - - - SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to… New CWE-73
 External Control of File Name or Path
CVE-2026-44127 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
855 - - - SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's e… New CWE-95
Eval Injection
CVE-2026-44128 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
856 - - - SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remot… New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-44129 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
857 - - - SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system i… New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-7864 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
858 8.1 HIGH
Network
- - DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attackers to execute arbitrary commands… New CWE-78
OS Command 
CVE-2022-50994 2026-05-9 00:48 2026-05-8 Show GitHub Exploit DB Packet Storm
859 5.3 MEDIUM
Network
- - Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key. Attackers can access … New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-41928 2026-05-9 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm
860 6.1 MEDIUM
Network
- - Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulati… New CWE-79
Cross-site Scripting
CVE-2026-41929 2026-05-9 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm