Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203091 4.7 警告
Network
Huseyin Berberoglu - WordPress 用プラグイン WP Favorite Posts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1160 2016-03-29 15:39 2016-03-24 Show GitHub Exploit DB Packet Storm
203092 4 警告 アップル
Apache Software Foundation
- Apache Subversion の svn_repos_trace_node_locations 関数における重要なパス情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-3187 2016-03-29 15:39 2015-08-7 Show GitHub Exploit DB Packet Storm
203093 5 警告 アップル
Apache Software Foundation
- Apache Subversion の mod_authz_svn における隠しファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2015-3184 2016-03-29 15:39 2015-08-7 Show GitHub Exploit DB Packet Storm
203094 2.9 注意 Belden Inc. - Hirschmann Classic Platform スイッチの管理者パスワードが SNMP コミュニティ名を通じて漏えいする問題 CWE-200
CWE-Other
CVE-2016-2509 2016-03-29 15:14 2016-02-16 Show GitHub Exploit DB Packet Storm
203095 7.5 危険 pcre.org - PCRE の pcre_jit_compile.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9769 2016-03-29 15:05 2014-04-25 Show GitHub Exploit DB Packet Storm
203096 3.5 注意 VMware - Linux 上で稼動する VMware vRealize Business Advanced および Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2075 2016-03-29 12:06 2016-03-15 Show GitHub Exploit DB Packet Storm
203097 7.8 危険 シスコシステムズ - Cisco IOS および NX-OS の Locator/ID Separation Protocol の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2016-1351 2016-03-29 11:59 2016-03-23 Show GitHub Exploit DB Packet Storm
203098 7.8 危険 シスコシステムズ - Cisco IOS および Unified Communications Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1350 2016-03-29 11:59 2016-03-23 Show GitHub Exploit DB Packet Storm
203099 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE の Smart Install クライアントの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1349 2016-03-29 11:59 2016-03-23 Show GitHub Exploit DB Packet Storm
203100 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1348 2016-03-29 11:59 2016-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 9.8 CRITICAL
Network
- - AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow. The is_valid_filename fu… Update CWE-22
CWE-367
Path Traversal
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-37531 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
202 3.1 LOW
Network
google chrome Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted … New CWE-352
CWE-1021
 Origin Validation Error
 Improper Restriction of Rendered UI Layers or Frames
CVE-2026-8022 2026-05-8 00:15 2026-05-7 Show GitHub Exploit DB Packet Storm
203 5.5 MEDIUM
Local
- - Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can be triggered by crafted IGES or STEP files. These issues include an out-of-bound… Update CWE-125
Out-of-bounds Read
CVE-2026-42481 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
204 7.5 HIGH
Network
- - AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD… Update CWE-121
Stack-based Buffer Overflow
CVE-2026-37530 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
205 9.8 CRITICAL
Network
- - Integer underflow vulnerability in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Transport_Protocol_Data_Transfer,allows attackers to write to arb… Update CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-37534 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
206 10.0 CRITICAL
Network
- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers t… Update CWE-121
Stack-based Buffer Overflow
CVE-2026-37541 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
207 8.8 HIGH
Network
- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a … Update CWE-121
Stack-based Buffer Overflow
CVE-2026-42468 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
208 8.6 HIGH
Network
- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to… Update CWE-121
Stack-based Buffer Overflow
CVE-2026-42469 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
209 6.1 MEDIUM
Network
- - Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in the `/painel/gateways.php/error` endpoint does not properly sanitize user-suppli… Update CWE-79
Cross-site Scripting
CVE-2025-69606 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
210 6.5 MEDIUM
Network
- - A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request. Update CWE-77
Command Injection
CVE-2026-26461 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm