Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203631 9.8 緊急
Network 		IBM - IBM Tivoli Storage Manager FastBack のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8522 2016-04-7 11:03 2015-12-8 Show GitHub Exploit DB Packet Storm
203632 9.8 緊急
Network 		IBM - IBM Tivoli Storage Manager FastBack のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8521 2016-04-7 11:03 2015-12-8 Show GitHub Exploit DB Packet Storm
203633 9.8 緊急
Network 		IBM - IBM Tivoli Storage Manager FastBack のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8520 2016-04-7 11:03 2015-12-8 Show GitHub Exploit DB Packet Storm
203634 9.8 緊急
Network 		IBM - IBM Tivoli Storage Manager FastBack のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8519 2016-04-7 11:03 2015-12-8 Show GitHub Exploit DB Packet Storm
203635 9.8 緊急
Network 		ヒューレット・パッカード・エンタープライズ - HPE Asset Manager および Asset Manager CloudSystem Chargeback における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2016-2000 2016-04-7 10:40 2016-03-30 Show GitHub Exploit DB Packet Storm
203636 10 危険 Google - Google Chrome および Chrome OS における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0485 2016-04-6 17:41 2011-01-12 Show GitHub Exploit DB Packet Storm
203637 5 警告 GPLHost - DTC の client/new_account_form.php における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-0436 2016-04-6 17:24 2011-03-7 Show GitHub Exploit DB Packet Storm
203638 9.3 危険 Schneider Electric
アドバンテック株式会社		 - ISSymbol 仮想マシンの ISSymbol ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0340 2016-04-6 17:24 2011-05-4 Show GitHub Exploit DB Packet Storm
203639 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品の整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0098 2016-04-6 16:48 2011-04-12 Show GitHub Exploit DB Packet Storm
203640 4.7 警告 マイクロソフト - 複数の Microsoft 製品の Client/Server Run-time Subsystem における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0030 2016-04-6 16:48 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 7.3 HIGH
Network 		- - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, ma… New CWE-787
 Out-of-bounds Write 		CVE-2026-43656 2026-05-13 03:17 2026-05-12 Show GitHub Exploit DB Packet Storm
62 7.3 HIGH
Network 		- - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected s… New CWE-125
Out-of-bounds Read 		CVE-2026-43655 2026-05-13 03:17 2026-05-12 Show GitHub Exploit DB Packet Storm
63 - - - Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21,… New CWE-285
Improper Authorization 		CVE-2026-43515 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
64 - - - Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M… New CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-43514 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
65 - - - Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 … New CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-43513 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
66 - - - DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, fr… New CWE-592
 DEPRECATED: Authentication Bypass Issues 		CVE-2026-43512 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
67 7.5 HIGH
Network 		- - Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-42899 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
68 9.9 CRITICAL
Network 		- - Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. New CWE-94
Code Injection 		CVE-2026-42898 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
69 7.8 HIGH
Local 		- - Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. New CWE-122
CWE-190
Heap-based Buffer Overflow
 Integer Overflow or Wraparound 		CVE-2026-42896 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
70 7.4 HIGH
Network 		- - Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network. New CWE-77
Command Injection 		CVE-2026-42893 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm