Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203841 5.5 警告
Local
openSUSE project
SUSE
- openSUSE および SUSE Linux Enterprise Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-4036 2016-04-22 10:10 2016-03-30 Show GitHub Exploit DB Packet Storm
203842 8.8 重要
Network
Debian
PNG Development Group
Fedora Project
レッドハット
- libpng の pngwutil.c の png_check_keyword 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-8540 2016-04-21 17:38 2015-12-17 Show GitHub Exploit DB Packet Storm
203843 7.5 重要
Local
シトリックス・システムズ
Xen プロジェクト
- Xen の hw/pt-msi.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8554 2016-04-21 17:36 2015-12-17 Show GitHub Exploit DB Packet Storm
203844 8.2 重要
Local
Xen プロジェクト - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8550 2016-04-21 17:34 2015-12-17 Show GitHub Exploit DB Packet Storm
203845 7.8 重要
Local
Debian
OptiPNG
- OptiPNG の pngxrbmp.c の bmp_read_rows 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3981 2016-04-21 17:05 2016-04-4 Show GitHub Exploit DB Packet Storm
203846 7.6 重要
Network
Debian
Apache Software Foundation
- Apache Subversion の mod_dav_svn の util.c における整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-5343 2016-04-21 16:55 2015-12-16 Show GitHub Exploit DB Packet Storm
203847 9.8 緊急
Network
Canonical
Pixman
- Pixman の pixman-bits-image.c の create_bits 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-9766 2016-04-21 16:49 2014-04-9 Show GitHub Exploit DB Packet Storm
203848 9.8 緊急
Network
openSUSE project
Canonical
Git project
レッドハット
- Git の git-remote-ext および不特定の他のリモートヘルパープログラムにおける任意のコードを実行される脆弱性 CWE-20
CWE-Other
CVE-2015-7545 2016-04-21 16:40 2015-09-29 Show GitHub Exploit DB Packet Storm
203849 4.3 警告
Network
Roundup
Debian
- Roundup の schema.py における重要なユーザ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-6276 2016-04-21 16:35 2014-07-4 Show GitHub Exploit DB Packet Storm
203850 7.5 重要
Network
Eran Hammer - Hawk におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-2515 2016-04-21 16:17 2016-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values New CWE-332
 Insufficient Entropy in PRNG
CVE-2026-3290 2026-05-15 23:11 2026-05-15 Show GitHub Exploit DB Packet Storm
482 5.9 MEDIUM
Network
- - Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is… New CWE-674
 Uncontrolled Recursion
CVE-2026-6811 2026-05-15 23:11 2026-05-15 Show GitHub Exploit DB Packet Storm
483 - - - Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the metasploitPostgreSQL service the subseque… New CWE-284
CWE-427
CWE-829
Improper Access Control
 Uncontrolled Search Path Element
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-7373 2026-05-15 23:11 2026-05-15 Show GitHub Exploit DB Packet Storm
484 7.8 HIGH
Local
- - VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary. A malicious actor with local non-administrative user privileges… New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-41702 2026-05-15 23:11 2026-05-15 Show GitHub Exploit DB Packet Storm
485 - - - Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host. New CWE-78
OS Command 
CVE-2026-8654 2026-05-15 23:11 2026-05-15 Show GitHub Exploit DB Packet Storm
486 8.8 HIGH
Network
- - Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organizations by spoofing identity headers. Attacker… New CWE-287
Improper Authentication
CVE-2026-8621 2026-05-15 23:11 2026-05-15 Show GitHub Exploit DB Packet Storm
487 8.1 HIGH
Network
- - Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress agent tickets by sending POST requests t… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-8629 2026-05-15 23:11 2026-05-15 Show GitHub Exploit DB Packet Storm
488 7.2 HIGH
Network
- - Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code executio… New CWE-354
 Improper Validation of Integrity Check Value
CVE-2026-8597 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
489 7.2 HIGH
Network
- - Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract … New CWE-312
 Cleartext Storage of Sensitive Information
CVE-2026-8596 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
490 - - - Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of confident… New CWE-1274
 Improper Access Control for Volatile Memory Containing Boot Code
CVE-2024-36345 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm