Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203861	9.6	緊急 Network	The PHP Group	-	PHP の ext/libxml/libxml.c における XML 外部エンティティおよび XML エンティティ拡張攻撃を実行される脆弱性	CWE-Other その他	CVE-2015-8866	2016-05-25 16:28	2015-02-19	Show	GitHub Exploit DB Packet Storm

203862	7.3	重要 Local	The PHP Group アップル file project	-	PHP の Fileinfo コンポーネントで使用される file の funcs.c の file_check_mem 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2015-8865	2016-05-25 16:28	2015-06-4	Show	GitHub Exploit DB Packet Storm

203863	5.9	警告 Network	マイクロソフト日立	-	Microsoft .NET Framework における重要な平文情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-0149	2016-05-24 15:55	2016-05-10	Show	GitHub Exploit DB Packet Storm

203864	7.5	重要 Network	openSUSE project GNOME Project	-	librsvg の _rsvg_css_normalize_font_size 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-4348	2016-05-24 15:32	2016-05-18	Show	GitHub Exploit DB Packet Storm

203865	7.5	重要 Network	GNOME Project	-	librsvg におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-7558	2016-05-24 15:32	2015-10-22	Show	GitHub Exploit DB Packet Storm

203866	7.5	重要 Network	GNOME Project	-	librsvg の rsvg-shapes.c の _rsvg_node_poly_build_path 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-7557	2016-05-24 15:32	2015-02-6	Show	GitHub Exploit DB Packet Storm

203867	8.8	重要 Network	The Foreman	-	Foreman の Smart-Proxy の TFTP モジュールの tftp_api.rb における Eval インジェクションの脆弱性	CWE-Other その他	CVE-2016-3728	2016-05-24 15:09	2016-05-5	Show	GitHub Exploit DB Packet Storm

203868	5.4	警告 Network	The Foreman	-	Foreman におけるプライベートのブックマークを読まれる脆弱性	CWE-Other その他	CVE-2016-2100	2016-05-24 15:09	2016-02-29	Show	GitHub Exploit DB Packet Storm

203869	5.3	警告 Network	Haxx	-	cURL および libcurl におけるサーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2016-3739	2016-05-24 15:08	2016-05-18	Show	GitHub Exploit DB Packet Storm

203870	6.1	警告 Network	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-5714	2016-05-24 14:51	2015-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
851	7.5	HIGH Network	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.	CWE-416 Use After Free	CVE-2026-40406	2026-05-16 00:20	2026-05-13	Show	GitHub Exploit DB Packet Storm

852	7.8	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.	CWE-122 Heap-based Buffer Overflow	CVE-2026-40407	2026-05-16 00:19	2026-05-13	Show	GitHub Exploit DB Packet Storm

853	9.1	CRITICAL Network	-	-	Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to forward local secrets such as API tokens…	CWE-94 Code Injection	CVE-2026-8634	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

854	3.1	LOW Network	-	-	Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chro…	CWE-125 Out-of-bounds Read	CVE-2026-8578	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

855	4.3	MEDIUM Network	-	-	Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…	CWE-942 Permissive Cross-domain Policy with Untrusted Domains	CVE-2026-8576	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

856	4.3	MEDIUM Network	-	-	SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Readers can enumerate…	CWE-863 Incorrect Authorization	CVE-2026-45148	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

857	7.5	HIGH Network	-	-	libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciou…	CWE-190 Integer Overflow or Wraparound	CVE-2026-44673	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

858	-		-	-	SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the kernel stores Attribute View (AV / database) names without any HTML escape, then a render template uses raw strings.…	CWE-79 CWE-94 CWE-1188 Cross-site Scripting Code Injection Insecure Default Initialization of Resource	CVE-2026-44670	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

859	-		-	-	HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Prior to 3.3.8, the sanitizeString() function in convertCore.php is missing backtick (`) and tab (\t) from its …	CWE-78 OS Command	CVE-2026-44666	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

860	-		-	-	SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, he tooltip mouseover handler in app/src/block/popover.ts reads aria-label via getAttribute and passes it through decode…	CWE-79 CWE-116 CWE-1188 Cross-site Scripting Improper Encoding or Escaping of Output Insecure Default Initialization of Resource	CVE-2026-44588	2026-05-16 00:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed