Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203241 6.1 警告
Network
Debian
Fedora Project
Horde
- Horde Groupware および Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8807 2016-04-21 16:09 2015-12-14 Show GitHub Exploit DB Packet Storm
203242 8.6 重要
Network
Debian
Inspire IRCd
- InspIRCd の dns.cpp の DNS::GetResult 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8702 2016-04-21 16:05 2015-04-16 Show GitHub Exploit DB Packet Storm
203243 7.5 重要
Network
Debian
Canonical
Fedora Project
libssh
- libssh の package_cb.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-3146 2016-04-21 16:00 2015-04-30 Show GitHub Exploit DB Packet Storm
203244 4.3 警告
Network
Tryton
Debian
- trytond の model/modelstorage.py におけるアクセス制限を回避される脆弱性が存在します。 CWE-264
認可・権限・アクセス制御
CVE-2015-0861 2016-04-21 15:50 2015-12-17 Show GitHub Exploit DB Packet Storm
203245 5.3 警告
Network
Redmine
Debian
- Redmine の app/views/journals/index.builder における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-8537 2016-04-21 15:47 2015-12-5 Show GitHub Exploit DB Packet Storm
203246 7.4 重要
Network
Redmine
Debian
- Redmine の app/controllers/application_controller.rb の valid_back_url 関数におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2015-8474 2016-04-21 15:47 2015-09-13 Show GitHub Exploit DB Packet Storm
203247 4.3 警告
Network
Redmine
Debian
- Redmine の Issues API における changeset のメッセージの重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-8473 2016-04-21 15:47 2015-11-14 Show GitHub Exploit DB Packet Storm
203248 5.3 警告
Network
Redmine
Debian
- Redmine の app/views/timelog/_form.html.erb における issues の subjects に関する重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2015-8346 2016-04-21 15:47 2015-11-14 Show GitHub Exploit DB Packet Storm
203249 5.5 警告
Local
Fedora Project
The GIFLIB project
- giflib の giffix の giffix.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-7555 2016-04-21 15:45 2015-12-21 Show GitHub Exploit DB Packet Storm
203250 6.1 警告
Local
Huawei - Huawei P8 および Mate S スマートフォンのソフトウェアの Video0 ドライバにおけるスタックメモリから重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2015-8682 2016-04-21 15:45 2015-12-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
741 6.1 MEDIUM
Network
frappe erpnext ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine. An attacker with permission to create or edit email templates can inject malicious JavaScript co… CWE-79
Cross-site Scripting
CVE-2026-38432 2026-05-9 02:05 2026-05-6 Show GitHub Exploit DB Packet Storm
742 7.7 HIGH
Network
istio istio Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointing to an internal se… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41413 2026-05-9 02:03 2026-05-7 Show GitHub Exploit DB Packet Storm
743 9.8 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… CWE-190
 Integer Overflow or Wraparound
CVE-2026-42217 2026-05-9 02:01 2026-05-7 Show GitHub Exploit DB Packet Storm
744 8.8 HIGH
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… CWE-190
 Integer Overflow or Wraparound
CVE-2026-41142 2026-05-9 02:00 2026-05-7 Show GitHub Exploit DB Packet Storm
745 9.8 CRITICAL
Network
hitachi virtual_storage_one_block OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual Storage Platform On… CWE-78
OS Command 
CVE-2025-9661 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
746 7.8 HIGH
Local
zte zxcloud_irai ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privi… CWE-427
 Uncontrolled Search Path Element
CVE-2026-44406 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
747 9.1 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… CWE-125
Out-of-bounds Read
CVE-2026-42216 2026-05-9 01:56 2026-05-7 Show GitHub Exploit DB Packet Storm
748 7.8 HIGH
Local
libreoffice libreoffice Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2… CWE-787
 Out-of-bounds Write
CVE-2026-4430 2026-05-9 01:48 2026-05-7 Show GitHub Exploit DB Packet Storm
749 - - - ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated remote attacker to pe… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44499 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
750 - - - Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum… CWE-407
 Inefficient Algorithmic Complexity
CVE-2026-43967 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm