Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204031 6.8 警告
Network
Apache Software Foundation - Apache Subversion の svnserve/cyrus_auth.c の canonicalize_username 関数における認証に関する脆弱性 CWE-Other
その他
CVE-2016-2167 2016-05-10 17:45 2016-04-28 Show GitHub Exploit DB Packet Storm
204032 7.5 重要
Network
OpenSSL Project - OpenSSL の crypto/rsa/rsa_gen.c における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2000-1254 2016-05-10 17:39 2000-06-1 Show GitHub Exploit DB Packet Storm
204033 7.4 重要
Network
シスコシステムズ - Cisco Prime Collaboration Assurance ソフトウェアにおけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2016-1392 2016-05-10 15:02 2016-05-3 Show GitHub Exploit DB Packet Storm
204034 9.8 緊急
Network
シスコシステムズ - Cisco TelePresence ソフトウェアの TC および CE の XML API における制御コマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2016-1387 2016-05-10 15:02 2016-05-4 Show GitHub Exploit DB Packet Storm
204035 7.5 重要
Network
varnish-cache.org
Debian
- Varnish における任意の HTTP ヘッダを挿入される脆弱性 CWE-Other
その他
CVE-2015-8852 2016-05-10 11:17 2015-03-23 Show GitHub Exploit DB Packet Storm
204036 7.5 重要
Network
cairographics.org
openSUSE project
- cairo の cairo-image-compositor.c の fill_xrgb32_lerp_opaque_spans 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-3190 2016-05-10 10:49 2016-03-18 Show GitHub Exploit DB Packet Storm
204037 6.5 警告
Network
HexChat
Canonical
XChat
- 複数の XChat 製品および HexChat の common/server.c の ssl_do_connect 関数における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2013-7449 2016-05-10 10:41 2013-04-9 Show GitHub Exploit DB Packet Storm
204038 6.2 警告
Local
Linux - Linux Kernel の sound/core/hrtimer.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2549 2016-05-10 10:09 2016-01-31 Show GitHub Exploit DB Packet Storm
204039 6.2 警告
Local
Linux - Linux Kernel の sound/core/timer.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2548 2016-05-10 10:09 2016-01-31 Show GitHub Exploit DB Packet Storm
204040 7.4 重要
Local
Linux - Linux Kernel の arch/x86/mm/tlb.c における権限を取得される脆弱性 CWE-362
競合状態
CVE-2016-2069 2016-05-10 10:09 2016-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 8.1 HIGH
Network
openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, administrative role changes and user deletions do not iterate SESSION_POOL to discon… Update CWE-613
 Insufficient Session Expiration
CVE-2026-44553 2026-05-19 23:16 2026-05-16 Show GitHub Exploit DB Packet Storm
302 5.3 MEDIUM
Network
- - An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset functionality under /OutsideCmd New CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-36438 2026-05-19 23:16 2026-05-19 Show GitHub Exploit DB Packet Storm
303 7.3 HIGH
Network
- - Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration. The application enables Node.js integration while disabling context isolation… New - CVE-2026-26462 2026-05-19 23:16 2026-05-19 Show GitHub Exploit DB Packet Storm
304 9.1 CRITICAL
Network
freertos coremqtt Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users s… Update CWE-125
Out-of-bounds Read
CVE-2026-8686 2026-05-19 23:01 2026-05-16 Show GitHub Exploit DB Packet Storm
305 9.8 CRITICAL
Network
lmsys sglang SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the intern… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-7301 2026-05-19 22:49 2026-05-18 Show GitHub Exploit DB Packet Storm
306 9.1 CRITICAL
Network
lmsys sglang SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by … New CWE-35
 Path Traversal: '.../...//'
CVE-2026-7302 2026-05-19 22:43 2026-05-18 Show GitHub Exploit DB Packet Storm
307 9.8 CRITICAL
Network
lmsys sglang SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-7304 2026-05-19 22:38 2026-05-18 Show GitHub Exploit DB Packet Storm
308 7.0 HIGH
Local
vim vim Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-lik… Update CWE-78
CWE-88
OS Command 
Argument Injection
CVE-2026-46483 2026-05-19 21:27 2026-05-16 Show GitHub Exploit DB Packet Storm
309 5.8 MEDIUM
Network
traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.44, 3.6.15, and 3.7.0-rc.3, there is an information disclosure vulnerability in Traefik's errors (custom error pages) middleware. Whe… Update CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-41181 2026-05-19 21:24 2026-05-16 Show GitHub Exploit DB Packet Storm
310 9.9 CRITICAL
Network
traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant with HTTPRoute creation permissions to expose the RE… Update CWE-284
Improper Access Control
CVE-2026-44774 2026-05-19 21:22 2026-05-16 Show GitHub Exploit DB Packet Storm