Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203171 6.5 警告 IBM - 複数の IBM 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-7448 2016-03-23 15:59 2015-09-29 Show GitHub Exploit DB Packet Storm
203172 10 危険 IBM - 複数の IBM Tivoli Storage Manager 製品の VMware vSphere GUI の Data Protection コンポーネントにおける管理権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-7425 2016-03-23 15:59 2015-12-11 Show GitHub Exploit DB Packet Storm
203173 3.6 注意 ヒューレット・パッカード・エンタープライズ - HPE System Management Homepage における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2016-1996 2016-03-23 11:48 2016-03-15 Show GitHub Exploit DB Packet Storm
203174 10 危険 ヒューレット・パッカード・エンタープライズ - HPE System Management Homepage における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2016-1995 2016-03-23 11:48 2016-03-15 Show GitHub Exploit DB Packet Storm
203175 4 警告 ヒューレット・パッカード・エンタープライズ - HPE System Management Homepage における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-1994 2016-03-23 11:48 2016-03-15 Show GitHub Exploit DB Packet Storm
203176 5.5 警告 ヒューレット・パッカード・エンタープライズ - HPE System Management Homepage における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2016-1993 2016-03-23 11:48 2016-03-15 Show GitHub Exploit DB Packet Storm
203177 4 警告 ヒューレット・パッカード・エンタープライズ - HPE ArcSight ESM および ArcSight ESM Express における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-1992 2016-03-23 11:48 2016-03-15 Show GitHub Exploit DB Packet Storm
203178 6 警告 ヒューレット・パッカード・エンタープライズ - HPE ArcSight ESM および ArcSight ESM Express における不特定の "ファイルダウンロード" 攻撃を実行される脆弱性 CWE-noinfo
情報不足 		CVE-2016-1991 2016-03-23 11:48 2016-03-14 Show GitHub Exploit DB Packet Storm
203179 4.3 警告 ヒューレット・パッカード・エンタープライズ - HPE ArcSight ESM および ArcSight ESM Express におけるコマンド実行の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-1990 2016-03-23 11:48 2016-03-14 Show GitHub Exploit DB Packet Storm
203180 10 危険 ヒューレット・パッカード・エンタープライズ - HPE Network Automation における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2016-1989 2016-03-23 11:48 2016-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ima: verify the previous kernel's IMA buffer lies in addressable RAM Patch series "Address page fault in ima_restore_measurement_… New NVD-CWE-noinfo
CVE-2026-43129 2026-05-9 02:46 2026-05-6 Show GitHub Exploit DB Packet Storm
62 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac ("iommu/vt-d: Don't issue AT… New NVD-CWE-noinfo
CVE-2026-43130 2026-05-9 02:44 2026-05-6 Show GitHub Exploit DB Packet Storm
63 9.1 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() If overlay is used on top of btrfs, dentry->d_s… New NVD-CWE-noinfo
CVE-2026-43117 2026-05-9 02:43 2026-05-6 Show GitHub Exploit DB Packet Storm
64 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer derefere… New CWE-476
 NULL Pointer Dereference 		CVE-2026-43131 2026-05-9 02:42 2026-05-6 Show GitHub Exploit DB Packet Storm
65 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of logging a new name o… New NVD-CWE-noinfo
CVE-2026-43118 2026-05-9 02:30 2026-05-6 Show GitHub Exploit DB Packet Storm
66 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr… New NVD-CWE-noinfo
CVE-2026-43132 2026-05-9 02:26 2026-05-6 Show GitHub Exploit DB Packet Storm
67 7.9 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload o… New NVD-CWE-noinfo
CVE-2026-43133 2026-05-9 02:25 2026-05-6 Show GitHub Exploit DB Packet Storm
68 4.8 MEDIUM
Network 		linuxcontainers incus Incus is a system container and virtual machine manager. In versions before 7.0.0, broken TLS validation logic in the OVN database connection logic can allow connections to an attacker's OVN database… New CWE-295
Improper Certificate Validation  		CVE-2026-40243 2026-05-9 02:23 2026-05-7 Show GitHub Exploit DB Packet Storm
69 8.2 HIGH
Network 		quarkus quarkus Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsistency between the sec… New CWE-863
 Incorrect Authorization 		CVE-2026-39852 2026-05-9 02:18 2026-05-6 Show GitHub Exploit DB Packet Storm
70 - - - Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P… New CWE-79
Cross-site Scripting 		CVE-2026-42794 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm