Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203241 4.3 警告 Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-1955 2016-03-18 14:11 2016-03-8 Show GitHub Exploit DB Packet Storm
203242 6 警告 OpenStack - OpenStack Identity および keystonemiddleware の Identity サービスにおけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-7546 2016-03-17 18:05 2015-12-15 Show GitHub Exploit DB Packet Storm
203243 5 警告 シスコシステムズ - Cisco Policy Suite の password-management administration コンポーネントにおける RBAC 制限を回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-1357 2016-03-17 15:37 2016-03-2 Show GitHub Exploit DB Packet Storm
203244 9.3 危険 マイクロソフト - Microsoft Internet Explorer 7 から 11 の CAttrArray オブジェクトの実装における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-6184 2016-03-17 14:43 2015-10-13 Show GitHub Exploit DB Packet Storm
203245 7.8 危険 シスコシステムズ - Cisco ASA 5500 デバイス用コンテンツ セキュリティ & コントロール セキュリティ サービス モジュールの HTTPS 検査エンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-399
CVE-2016-1312 2016-03-17 14:42 2016-03-9 Show GitHub Exploit DB Packet Storm
203246 7.5 危険 Debian
Canonical
Novell
Igor Sysoev		 - nginx のリゾルバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-0746 2016-03-17 14:15 2016-01-26 Show GitHub Exploit DB Packet Storm
203247 9 危険 IBM - IBM Tivoli Monitoring のポータルクライアントにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-7411 2016-03-17 14:07 2015-09-29 Show GitHub Exploit DB Packet Storm
203248 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2016-1010 2016-03-17 12:28 2016-03-10 Show GitHub Exploit DB Packet Storm
203249 9.3 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1005 2016-03-17 12:28 2016-03-10 Show GitHub Exploit DB Packet Storm
203250 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1002 2016-03-17 12:28 2016-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of logging a new name o… Update NVD-CWE-noinfo
CVE-2026-43118 2026-05-9 02:30 2026-05-6 Show GitHub Exploit DB Packet Storm
252 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr… Update NVD-CWE-noinfo
CVE-2026-43132 2026-05-9 02:26 2026-05-6 Show GitHub Exploit DB Packet Storm
253 7.9 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload o… Update NVD-CWE-noinfo
CVE-2026-43133 2026-05-9 02:25 2026-05-6 Show GitHub Exploit DB Packet Storm
254 4.8 MEDIUM
Network 		linuxcontainers incus Incus is a system container and virtual machine manager. In versions before 7.0.0, broken TLS validation logic in the OVN database connection logic can allow connections to an attacker's OVN database… New CWE-295
Improper Certificate Validation  		CVE-2026-40243 2026-05-9 02:23 2026-05-7 Show GitHub Exploit DB Packet Storm
255 8.2 HIGH
Network 		quarkus quarkus Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsistency between the sec… Update CWE-863
 Incorrect Authorization 		CVE-2026-39852 2026-05-9 02:18 2026-05-6 Show GitHub Exploit DB Packet Storm
256 - - - Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P… New CWE-79
Cross-site Scripting 		CVE-2026-42794 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
257 9.8 CRITICAL
Network 		- - Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRE… New CWE-1392
 Use of Default Credentials 		CVE-2026-42072 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
258 6.1 MEDIUM
Network 		- - MapServer is a system for developing web-based GIS applications. From version 6.0 to before version 8.6.2, a reflected XSS vulnerability in MapServer's WMS server allows an unauthenticated attacker t… New CWE-80
Basic XSS 		CVE-2026-42030 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
259 - - - pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, t… New CWE-89
SQL Injection 		CVE-2026-41889 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
260 4.9 MEDIUM
Network 		- - Flarum is open-source forum software. Prior to versions 1.8.16 and 2.0.0-rc.1, Flarum's patch for CVE-2023-27577 restricted the @import and data-uri() LESS features in the custom_less setting, but th… New CWE-22
CWE-918
Path Traversal
Server-Side Request Forgery (SSRF)  		CVE-2026-41887 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm