Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203281 7.2 危険 Google - Android の Debuggerd の elf_utils.cpp の get_build_id 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0807 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
203282 7.2 危険 Google - Android のカーネルの Qualcomm Wi-Fi ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0806 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
203283 7.2 危険 Google - Android の Qualcomm ARM プロセッサ用パフォーマンスイベントマネージャーにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0805 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
203284 10 危険 Google - Android のメディアサーバの media/libmediaplayerservice/nuplayer/GenericSource.cpp における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0804 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
203285 10 危険 Google - Android のメディアサーバの libstagefright における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0803 2016-03-16 12:09 2016-02-1 Show GitHub Exploit DB Packet Storm
203286 7.8 危険 シスコシステムズ - Cisco Nexus 9000 Application Centric Infrastructure Mode スイッチのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-6398 2016-03-16 12:07 2015-02-3 Show GitHub Exploit DB Packet Storm
203287 9 危険 シスコシステムズ - Cisco Application Policy Infrastructure Controller デバイスのソフトウェアおよび Nexus 9000 ACI Mode スイッチのソフトウェアにおける RBAC 制限を回避される脆弱性 CWE-Other
その他
CVE-2016-1302 2016-03-16 11:51 2016-02-3 Show GitHub Exploit DB Packet Storm
203288 5 警告 シスコシステムズ - Cisco Videoscape Distribution Suite for Internet Streaming の TCP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1353 2016-03-16 11:18 2016-02-29 Show GitHub Exploit DB Packet Storm
203289 4.3 警告 GTK+
Canonical
- 複数のアプリケーションで使用される GTK+ の gdk/gdkcairo.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2013-7447 2016-03-16 11:02 2013-06-30 Show GitHub Exploit DB Packet Storm
203290 7.2 危険 マイクロソフト - Microsoft Windows Vista および Windows Server 2008 における権限昇格の脆弱性 CWE-20
CWE-264
CVE-2016-0100 2016-03-16 10:32 2016-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 9.1 CRITICAL
Network
- - auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the … New CWE-287
Improper Authentication
CVE-2026-42560 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
22 - - - Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code e… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write
CVE-2026-42311 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
23 - - - Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the… New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-42310 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
24 - - - Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polyg… New CWE-122
Heap-based Buffer Overflow
CVE-2026-42309 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
25 - - - Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-42308 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
26 - - - A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized… New CWE-862
 Missing Authorization
CVE-2025-15634 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
27 - - - An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and configuration variables)… New CWE-863
 Incorrect Authorization
CVE-2025-15633 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
28 - - - Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of th… New CWE-23
 Relative Path Traversal
CVE-2026-8209 2026-05-9 13:16 2026-05-9 Show GitHub Exploit DB Packet Storm
29 - - - Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user provided .zip as PH… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-8208 2026-05-9 13:16 2026-05-9 Show GitHub Exploit DB Packet Storm
30 7.5 HIGH
Local
- - An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser could lead to a stack-to-heap overflow when the parser is run on a coroutine st… Update CWE-674
 Uncontrolled Recursion
CVE-2026-44028 2026-05-9 13:16 2026-05-5 Show GitHub Exploit DB Packet Storm