Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203181 10 危険 ヒューレット・パッカード・エンタープライズ - HPE Network Automation における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-1988 2016-03-23 11:48 2016-03-3 Show GitHub Exploit DB Packet Storm
203182 4.6 警告 シスコシステムズ - Cisco Gigabit Switch Router 12000 デバイス上で稼動する IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1361 2016-03-23 11:31 2016-03-11 Show GitHub Exploit DB Packet Storm
203183 3 注意 シスコシステムズ - Cisco Prime LAN Management Solution における平文データを取得される脆弱性 CWE-200
情報漏えい
CVE-2016-1360 2016-03-23 11:31 2016-03-10 Show GitHub Exploit DB Packet Storm
203184 8 危険 シスコシステムズ - Cisco TelePresence Video Communication Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2016-1338 2016-03-23 11:31 2016-03-9 Show GitHub Exploit DB Packet Storm
203185 10 危険 シスコシステムズ - Cisco Nexus 3000 および Nexus 3500 デバイス上で稼動する Cisco NX-OS における root 権限を取得される脆弱性 CWE-287
不適切な認証
CVE-2016-1329 2016-03-23 11:31 2016-03-2 Show GitHub Exploit DB Packet Storm
203186 7.8 危険 シスコシステムズ - 複数の Cisco Nexus デバイス上で稼動する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-6260 2016-03-23 11:31 2015-08-17 Show GitHub Exploit DB Packet Storm
203187 7.5 危険 pcre.org - PCRE の pcre_compile.c および PCRE2 の pcre2_compile.c の compile_branch 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-3191 2016-03-23 11:08 2016-02-10 Show GitHub Exploit DB Packet Storm
203188 9.3 危険 シマンテック - Symantec Endpoint Protection のクライアントのアプリケーションとデバイス制御コンポーネントの SysPlant.sys ドライバにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8154 2016-03-23 10:36 2015-11-13 Show GitHub Exploit DB Packet Storm
203189 8.3 危険 シマンテック - Symantec Endpoint Protection Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-8153 2016-03-23 10:36 2015-11-13 Show GitHub Exploit DB Packet Storm
203190 8.5 危険 シマンテック - Symantec Endpoint Protection Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-8152 2016-03-23 10:36 2015-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 2.9 LOW
Local
- - In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. New CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2026-44928 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
162 - - - YARD is a Ruby Documentation tool. Prior to version 0.9.42, a path traversal vulnerability was discovered in YARD when using yard server to serve documentation. This bug would allow unsanitized HTTP … New CWE-22
Path Traversal
CVE-2026-41493 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
163 4.7 MEDIUM
Network
- - go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smar… New CWE-522
 Insufficiently Protected Credentials
CVE-2026-41506 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
164 9.8 CRITICAL
Network
- - math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse() is injected verbatim into a new Function() body without sanitization. Th… New CWE-94
Code Injection
CVE-2026-41507 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
165 - - - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Se… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41423 2026-05-9 01:02 2026-05-8 Show GitHub Exploit DB Packet Storm
166 - - - Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contains an authenticated remote code execution vulnerabilit… New CWE-74
Injection
CVE-2025-67486 2026-05-9 01:02 2026-05-9 Show GitHub Exploit DB Packet Storm
167 - - - Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.49.1, Nhost automatically links an incoming OAuth identity to an existing Nhost account when the email addresses match. T… New CWE-287
Improper Authentication
CVE-2026-41574 2026-05-9 01:02 2026-05-9 Show GitHub Exploit DB Packet Storm
168 7.5 HIGH
Network
coredns.io coredns CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can be bypassed on non-plain-DNS transports (DoT, DoH, DoH3, DoQ, and gRPC) because it trusts the transport w… New CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-33190 2026-05-9 01:01 2026-05-6 Show GitHub Exploit DB Packet Storm
169 7.5 HIGH
Network
coredns.io coredns CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone are configured. The l… New CWE-863
 Incorrect Authorization
CVE-2026-33489 2026-05-9 01:00 2026-05-6 Show GitHub Exploit DB Packet Storm
170 9.8 CRITICAL
Network
coredns.io coredns CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server check… New CWE-287
Improper Authentication
CVE-2026-35579 2026-05-9 00:58 2026-05-6 Show GitHub Exploit DB Packet Storm