Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203971 8.5 危険 サイボウズ - サイボウズ ガルーンにおいて任意の PHP コードが実行される複数の脆弱性 CWE-94
コード・インジェクション 		CVE-2015-5646
CVE-2015-5647 		2016-05-30 15:33 2015-10-7 Show GitHub Exploit DB Packet Storm
203972 7.5 重要
Network 		Kazu Yamamoto
Fedora Project		 - pgpdump の buffer.c の read_binary 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-4021 2016-05-30 14:07 2016-04-13 Show GitHub Exploit DB Packet Storm
203973 6.1 警告
Network 		フォーティネット - Fortinet FortiSandbox の Web ユーザインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-7360 2016-05-30 13:43 2015-07-24 Show GitHub Exploit DB Packet Storm
203974 4.7 警告
Network 		CMS Made Simple - CMS Made Simple におけるキャッシュポイズニング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-2784 2016-05-30 13:37 2016-03-28 Show GitHub Exploit DB Packet Storm
203975 8.8 重要
Network 		シスコシステムズ - Cisco Prime Infrastructure および Evolved Programmable Network Manager の API Web インターフェースにおける RBAC 制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-1406 2016-05-27 18:25 2016-05-23 Show GitHub Exploit DB Packet Storm
203976 7.5 重要
Network 		シスコシステムズ - Cisco Identity Services Engine の Active Directory 統合コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-287
CVE-2016-1402 2016-05-27 18:25 2016-05-17 Show GitHub Exploit DB Packet Storm
203977 6.1 警告
Network 		シスコシステムズ - Cisco Unified Computing System Central ソフトウェアの管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1401 2016-05-27 18:25 2016-05-17 Show GitHub Exploit DB Packet Storm
203978 7.5 重要
Network 		シスコシステムズ - Cisco TelePresence Video Communications Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1400 2016-05-27 18:25 2016-05-16 Show GitHub Exploit DB Packet Storm
203979 7.5 重要
Network 		シスコシステムズ - Cisco Web セキュリティ アプライアンスデバイス上で稼動する AsyncOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1383 2016-05-27 18:25 2016-05-18 Show GitHub Exploit DB Packet Storm
203980 7.5 重要
Network 		シスコシステムズ - Cisco Web セキュリティ アプライアンスデバイス上で稼動する AsyncOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1382 2016-05-27 18:25 2016-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
811 4.3 MEDIUM
Network 		dovecot
open-xchange 		dovecot An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left op… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-42006 2026-05-19 02:22 2026-05-12 Show GitHub Exploit DB Packet Storm
812 8.8 HIGH
Network 		fortinet fortindr An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions… Update CWE-89
SQL Injection 		CVE-2026-25088 2026-05-19 02:19 2026-05-13 Show GitHub Exploit DB Packet Storm
813 6.5 MEDIUM
Network 		fortinet fortideceptor An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2… Update CWE-88
Argument Injection 		CVE-2026-25690 2026-05-19 02:17 2026-05-13 Show GitHub Exploit DB Packet Storm
814 6.5 MEDIUM
Network 		- - Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A simi… New CWE-617
 Reachable Assertion 		CVE-2026-8843 2026-05-19 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
815 9.1 CRITICAL
Network 		netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encodi… Update CWE-20
CWE-400
CWE-626
 Improper Input Validation 
 Uncontrolled Resource Consumption
 Null Byte Interaction Error (Poison Null Byte) 		CVE-2026-42579 2026-05-19 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
816 7.5 HIGH
Network 		- - WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batched GraphQL queries with duplicated fields… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-47959 2026-05-19 02:05 2026-05-16 Show GitHub Exploit DB Packet Storm
817 9.8 CRITICAL
Network 		- - WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation.… Update CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-47965 2026-05-19 02:05 2026-05-16 Show GitHub Exploit DB Packet Storm
818 6.4 MEDIUM
Network 		- - WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject malicious script code through the fi… Update CWE-79
Cross-site Scripting 		CVE-2020-37233 2026-05-19 02:05 2026-05-17 Show GitHub Exploit DB Packet Storm
819 6.4 MEDIUM
Network 		- - WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scripts by manipulating the Logo URL parame… Update CWE-79
Cross-site Scripting 		CVE-2020-37235 2026-05-19 02:05 2026-05-17 Show GitHub Exploit DB Packet Storm
820 7.5 HIGH
Network 		- - WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the f… Update CWE-22
Path Traversal 		CVE-2021-47977 2026-05-19 02:05 2026-05-17 Show GitHub Exploit DB Packet Storm