Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203921 7.5 重要
Network
マイクロソフト
アドビシステムズ
Google
- Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR における脆弱性 CWE-noinfo
情報不足
CVE-2016-1100 2016-05-16 14:49 2016-05-12 Show GitHub Exploit DB Packet Storm
203922 7.5 重要
Network
マイクロソフト
アドビシステムズ
Google
- Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR における脆弱性 CWE-noinfo
情報不足
CVE-2016-1099 2016-05-16 14:49 2016-05-12 Show GitHub Exploit DB Packet Storm
203923 7.5 重要
Network
マイクロソフト
アドビシステムズ
Google
- Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR における脆弱性 CWE-noinfo
情報不足
CVE-2016-1098 2016-05-16 14:49 2016-05-12 Show GitHub Exploit DB Packet Storm
203924 7.5 重要
Network
マイクロソフト
アドビシステムズ
Google
- Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR における脆弱性 CWE-noinfo
情報不足
CVE-2016-1097 2016-05-16 14:49 2016-05-12 Show GitHub Exploit DB Packet Storm
203925 7.5 重要
Network
マイクロソフト
アドビシステムズ
Google
- Microsoft Internet Explorer および Microsoft Edge の Adobe Flash ライブラリで使用される Adobe Flash Player および Adobe AIR における脆弱性 CWE-noinfo
情報不足
CVE-2016-1096 2016-05-16 14:49 2016-05-12 Show GitHub Exploit DB Packet Storm
203926 7.8 重要
Local
マイクロソフト - 複数の Microsoft Windows 製品の Windows Journal における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-0182 2016-05-13 17:17 2016-05-10 Show GitHub Exploit DB Packet Storm
203927 7.8 重要
Local
マイクロソフト - Microsoft Windows Vista および Windows Server 2008 の IIS における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0152 2016-05-13 16:59 2016-05-10 Show GitHub Exploit DB Packet Storm
203928 5.5 警告
Local
マイクロソフト - Microsoft Windows 10 における仮想保護モードの HVCI の保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-0181 2016-05-13 16:59 2016-05-10 Show GitHub Exploit DB Packet Storm
203929 5.5 警告
Local
マイクロソフト - 複数の Microsoft Windows 製品のボリューム マネージャー ドライバーにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-0190 2016-05-13 16:51 2016-05-10 Show GitHub Exploit DB Packet Storm
203930 7.5 重要
Network
マイクロソフト - Microsoft Edge の Chakra JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0186 2016-05-13 16:47 2016-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 7.5 HIGH
Network
- - Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payl… New CWE-789
 Memory Allocation with Excessive Size Value
CVE-2021-47969 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
542 7.5 HIGH
Network
- - Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can generate a payload… New CWE-789
 Memory Allocation with Excessive Size Value
CVE-2021-47970 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
543 7.5 HIGH
Network
- - My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a pa… New CWE-789
 Memory Allocation with Excessive Size Value
CVE-2021-47971 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
544 7.5 HIGH
Network
- - Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can p… New CWE-789
 Memory Allocation with Excessive Size Value
CVE-2021-47972 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
545 7.5 HIGH
Network
- - Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can gener… New CWE-789
 Memory Allocation with Excessive Size Value
CVE-2021-47973 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
546 7.2 HIGH
Network
- - WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the fieldtitle parameter. Attackers can submit PO… New CWE-79
Cross-site Scripting
CVE-2021-47975 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
547 6.2 MEDIUM
Local
- - ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation. Attackers can send req… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2021-47978 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
548 5.4 MEDIUM
Network
- - Zechat 1.5 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to change a user's information by bypassing anti-CSRF protections. The application uses a CSRF token, but… New CWE-352
 Origin Validation Error
CVE-2018-25334 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
549 8.2 HIGH
Network
- - Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit th… New CWE-89
SQL Injection
CVE-2018-25338 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm
550 8.2 HIGH
Network
- - Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the… New CWE-89
SQL Injection
CVE-2018-25339 2026-05-19 02:32 2026-05-17 Show GitHub Exploit DB Packet Storm