Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203231 5.3 警告
Local
Linux
Debian
Xen プロジェクト
Canonical
- Xen の PCI バックエンドドライバにおける BUG 条件にヒットされる脆弱性 CWE-Other
その他
CVE-2015-8551 2016-04-20 11:46 2015-12-17 Show GitHub Exploit DB Packet Storm
203232 4.3 警告
Network
OpenStack - OpenStack Image Service におけるイメージのステータスを変更される脆弱性 CWE-Other
その他
CVE-2016-0757 2016-04-20 11:42 2016-02-3 Show GitHub Exploit DB Packet Storm
203233 6.3 警告
Network
シャープ株式会社 - EVAアニメータ用 ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1176 2016-04-20 09:38 2016-04-4 Show GitHub Exploit DB Packet Storm
203234 7.8 重要
Local
NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2556 2016-04-19 18:11 2016-03-14 Show GitHub Exploit DB Packet Storm
203235 7.5 重要
Network
ジュニパーネットワークス - Juniper ScreenOS の 管理 Web サービスインターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1268 2016-04-19 18:04 2016-04-13 Show GitHub Exploit DB Packet Storm
203236 5.9 警告
Network
F5 Networks - F5 BIG-IP APM および BIG-IP Edge Gateway の Single Sign-On 機能における重要な SessionId 情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-3686 2016-04-19 17:52 2016-04-9 Show GitHub Exploit DB Packet Storm
203237 7.5 重要
Network
xmlsoft.org - libxml2 の dict.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-8806 2016-04-19 17:51 2015-05-8 Show GitHub Exploit DB Packet Storm
203238 5.3 警告
Network
シスコシステムズ - Cisco Catalyst スイッチ上で稼動する Cisco IOS における重要なソフトウェアバージョン情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-1378 2016-04-19 17:45 2016-04-13 Show GitHub Exploit DB Packet Storm
203239 5.3 警告
Network
シスコシステムズ - Cisco ASR 9000 デバイス上で稼動する Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1376 2016-04-19 17:45 2016-04-12 Show GitHub Exploit DB Packet Storm
203240 9.8 緊急
Network
シスコシステムズ - Cisco Unified Computing System Central ソフトウェアにおける任意の OS コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-1352 2016-04-19 17:45 2016-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 7.3 HIGH
Network
- - A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0. Affected by this vulnerability is an unknown functionality of the file dzz/shares/admin.php of the component Shares Fileli… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8133 2026-05-9 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm
542 3.3 LOW
Local
- - A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file src/isomedia/box_code_base.c. The manipulation leads to allocation of resources. … New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-8124 2026-05-9 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
543 8.8 HIGH
Network
- - A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow.… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-8138 2026-05-9 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
544 6.4 MEDIUM
Network
- - The NMR Strava activities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `strava_nmr_connect` shortcode in all versions up to, and including, 1.0.14 due to insuffi… New CWE-79
Cross-site Scripting
CVE-2026-5341 2026-05-9 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
545 6.4 MEDIUM
Network
- - The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `e2pdf-download` shortcode in all versions up to, and includi… New CWE-79
Cross-site Scripting
CVE-2026-7650 2026-05-9 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
546 8.8 HIGH
Network
- - The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Deserialization of Untrusted Data in versions up to, and … New CWE-502
 Deserialization of Untrusted Data
CVE-2026-5127 2026-05-9 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
547 7.2 HIGH
Network
- - The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This is due to insufficient input sanitization on the 'url' POST par… New CWE-79
Cross-site Scripting
CVE-2026-7330 2026-05-9 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
548 6.4 MEDIUM
Network
- - The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sky-custom-scripts` custom post type in all versions up to, and including, 3.3.2. This is due to the custom p… New CWE-79
Cross-site Scripting
CVE-2026-7475 2026-05-9 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
549 6.3 MEDIUM
Network
- - A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parame… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8125 2026-05-9 00:45 2026-05-8 Show GitHub Exploit DB Packet Storm
550 7.3 HIGH
Network
- - A weakness has been identified in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /login.php. This manipulation of the argument txt_username causes sql injection. T… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8132 2026-05-9 00:45 2026-05-8 Show GitHub Exploit DB Packet Storm