Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203471 6.4 警告
Adjacent 		Huawei - Huawei E3276s USB モデムのソフトウェアにおけるネットワークトラフィックを傍受される脆弱性 CWE-Other
その他 		CVE-2016-3676 2016-04-18 17:08 2016-03-30 Show GitHub Exploit DB Packet Storm
203472 8.1 重要
Network 		Huawei - Huawei Policy Center のソフトウェアにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-3675 2016-04-18 17:08 2016-03-25 Show GitHub Exploit DB Packet Storm
203473 8.8 重要
Network 		Huawei - Huawei Policy Center のソフトウェアにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2405 2016-04-18 17:08 2016-02-17 Show GitHub Exploit DB Packet Storm
203474 5.5 警告
Local 		Huawei - Huawei P8 スマートフォンのソフトウェアのグラフィックドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1496 2016-04-18 17:08 2016-01-13 Show GitHub Exploit DB Packet Storm
203475 7.8 重要
Local 		Huawei - Huawei Mate S スマートフォンのソフトウェアのグラフィックドライバにおける整数オーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-1495 2016-04-18 17:08 2016-02-3 Show GitHub Exploit DB Packet Storm
203476 5.5 警告
Local 		Huawei - Huawei Sophia-L10 スマートフォンのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-8305 2016-04-18 17:08 2015-11-20 Show GitHub Exploit DB Packet Storm
203477 7.8 重要
Local 		Huawei - Huawei P7 フォンのソフトウェアにおける整数オーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8304 2016-04-18 17:08 2015-11-20 Show GitHub Exploit DB Packet Storm
203478 9.8 緊急
Network 		Debian
Kamailio		 - Kamailio の SEAS モジュールの encode_msg.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-2385 2016-04-18 16:53 2016-03-3 Show GitHub Exploit DB Packet Storm
203479 9.8 緊急
Network 		SPIP
Debian		 - SPIP の ecrire/inc/filtres.php の encoder_contexte_ajax 関数における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-3154 2016-04-18 16:22 2016-03-10 Show GitHub Exploit DB Packet Storm
203480 9.8 緊急
Network 		SPIP
Debian		 - SPIP における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-3153 2016-04-18 16:22 2016-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 6.5 MEDIUM
Network 		- - Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy fetches metadata for user-supplied post URLs and, under the default StoreLinkPreviews image mode, downloads the… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42181 2026-05-13 00:31 2026-05-9 Show GitHub Exploit DB Packet Storm
462 8.6 HIGH
Network 		- - 18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Versions prior to 3.9.3 allow an unauthenticated HTTP client to pollute Object… Update CWE-22
CWE-1321
Path Traversal
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-41690 2026-05-13 00:29 2026-05-9 Show GitHub Exploit DB Packet Storm
463 8.2 HIGH
Network 		- - i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware passes the user-controlled ln… Update CWE-22
CWE-918
Path Traversal
Server-Side Request Forgery (SSRF)  		CVE-2026-42353 2026-05-13 00:29 2026-05-9 Show GitHub Exploit DB Packet Storm
464 8.6 HIGH
Network 		- - i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware wrote user-controlled languag… Update CWE-79
CWE-113
Cross-site Scripting
HTTP Response Splitting 		CVE-2026-41683 2026-05-13 00:29 2026-05-9 Show GitHub Exploit DB Packet Storm
465 8.2 HIGH
Network 		- - i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the lng and ns options… Update CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-41693 2026-05-13 00:29 2026-05-9 Show GitHub Exploit DB Packet Storm
466 6.5 MEDIUM
Network 		- - i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno. Prior to version 9.0.2, i18next-locize-backend interpolates lng, ns, proje… Update CWE-22
CWE-74
Path Traversal
Injection 		CVE-2026-41885 2026-05-13 00:29 2026-05-9 Show GitHub Exploit DB Packet Storm
467 - - - Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3. New - CVE-2026-8401 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
468 4.7 MEDIUM
Local 		- - The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) … New CWE-59
Link Following 		CVE-2026-5061 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
469 - - - Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.6.0, The createTokenFromRefreshToken function (oidc_service.go) validates the refresh … New CWE-285
CWE-613
Improper Authorization
 Insufficient Session Expiration 		CVE-2026-43983 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
470 7.3 HIGH
Network 		- - YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. Prior to 4.0.5 and 3.2.12, the thread posting and reply feature accepts user-supplied content via a a post or reply that is stored server-side and… New CWE-79
CWE-80
CWE-116
Cross-site Scripting
Basic XSS
 Improper Encoding or Escaping of Output 		CVE-2026-43939 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm