Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203641 5.5 警告
Local
シマンテック - Symantec Altiris IT Management Suite のクライアントの Management Agent におけるアプリケーションブラックリストの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2202 2016-05-2 14:48 2016-04-7 Show GitHub Exploit DB Packet Storm
203642 5.5 警告
Local
Canonical
OptiPNG
- OptiPNG で使用される gif2png の gifread.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-7802 2016-05-2 14:09 2015-09-23 Show GitHub Exploit DB Packet Storm
203643 6.5 警告
Network
Huawei - 複数の Huawei 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-8677 2016-05-2 11:42 2015-12-25 Show GitHub Exploit DB Packet Storm
203644 6.1 警告
Network
アドビシステムズ - Adobe Analytics AppMeasurement for Flash Library におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1036 2016-05-2 10:58 2016-04-21 Show GitHub Exploit DB Packet Storm
203645 8.8 重要
Network
マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR の TextField オブジェクトの実装における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-8823 2016-05-2 10:53 2015-12-8 Show GitHub Exploit DB Packet Storm
203646 7.5 重要
Network
Ecava - Ecava IntegraXor の HMI Web サーバにおける重要な平文情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2016-2306 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
203647 6.1 警告
Network
Ecava - Ecava IntegraXor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2305 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
203648 5.3 警告
Network
Ecava - Ecava IntegraXor における CRLF インジェクションの脆弱性 CWE-Other
その他
CVE-2016-2303 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
203649 5.3 警告
Network
Ecava - Ecava IntegraXor における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2302 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
203650 6.3 警告
Network
Ecava - Ecava IntegraXor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-2301 2016-04-28 17:06 2016-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
681 7.8 HIGH
Local
- - External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to conduct an escalation of privilege via loca… New CWE-73
 External Control of File Name or Path
CVE-2026-30905 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
682 7.8 HIGH
Local
- - Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access. New CWE-426
 Untrusted Search Path
CVE-2026-30906 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
683 5.4 MEDIUM
Network
- - podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without … New CWE-79
Cross-site Scripting
CVE-2026-43644 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
684 3.7 LOW
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments t… New CWE-328
 Use of Weak Hash
CVE-2026-44582 2026-05-15 03:15 2026-05-14 Show GitHub Exploit DB Packet Storm
685 7.6 HIGH
Network
- - Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls … New CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-44516 2026-05-15 03:14 2026-05-15 Show GitHub Exploit DB Packet Storm
686 - - - The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redi… New CWE-601
Open Redirect
CVE-2026-44503 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm
687 - - - Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, giv… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-44504 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm
688 9.1 CRITICAL
Network
- - Valtimo is an open-source business process automation platform. com.ritense.valtimo:document from 12.0.0 to before 12.32.0, com.ritense.valtimo:case from 13.0.0 to before 13.23.0, and com.ritense.val… New CWE-94
Code Injection
CVE-2026-42555 2026-05-15 03:13 2026-05-15 Show GitHub Exploit DB Packet Storm
689 8.8 HIGH
Network
arubanetworks arubaos
sd-wan
Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabiliti… New CWE-77
Command Injection
CVE-2026-44870 2026-05-15 03:13 2026-05-13 Show GitHub Exploit DB Packet Storm
690 7.5 HIGH
Network
- - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exha… New CWE-400
CWE-407
 Uncontrolled Resource Consumption
 Inefficient Algorithmic Complexity
CVE-2026-42304 2026-05-15 03:12 2026-05-14 Show GitHub Exploit DB Packet Storm