Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204141 7.5 重要
Network 		IBM - IBM WebSphere MQ のキュー・マネージャーエージェントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-0260 2016-07-1 11:48 2016-06-2 Show GitHub Exploit DB Packet Storm
204142 6.1 警告
Network 		CA Technologies - CA Release Automation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8699 2016-07-1 11:15 2015-12-28 Show GitHub Exploit DB Packet Storm
204143 7.1 重要
Local 		CA Technologies - CA Release Automation における任意のファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2015-8698 2016-07-1 11:15 2015-12-27 Show GitHub Exploit DB Packet Storm
204144 7.5 重要
Network 		WordPress.org - WordPress における sanitize_file_name 保護メカニズムを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2016-5839 2016-06-30 15:31 2016-06-21 Show GitHub Exploit DB Packet Storm
204145 7.5 重要
Network 		WordPress.org - WordPress におけるパスワード変更の制限を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-5838 2016-06-30 15:31 2016-06-21 Show GitHub Exploit DB Packet Storm
204146 7.5 重要
Network 		WordPress.org - WordPress におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2016-5837 2016-06-30 15:31 2016-06-21 Show GitHub Exploit DB Packet Storm
204147 7.5 重要
Network 		WordPress.org - WordPress の oEmbed プロトコルの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2016-5836 2016-06-30 15:31 2016-06-21 Show GitHub Exploit DB Packet Storm
204148 7.5 重要
Network 		WordPress.org - WordPress における重要なリビジョン履歴情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-5835 2016-06-30 15:31 2016-06-21 Show GitHub Exploit DB Packet Storm
204149 6.1 警告
Network 		WordPress.org - WordPress の wp-includes/post-template.php の wp_get_attachment_link 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5834 2016-06-30 15:31 2016-06-21 Show GitHub Exploit DB Packet Storm
204150 6.1 警告
Network 		WordPress.org - WordPress の wp-admin/includes/class-wp-media-list-table.php の column_title 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5833 2016-06-30 15:31 2016-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1611 - - - Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, local authenticated users can cause Synapse to starve other requests of CPU and lead to other requests failing, causing o… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-45078 2026-05-29 03:03 2026-05-29 Show GitHub Exploit DB Packet Storm
1612 7.5 HIGH
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. The POST /upi/v1/upNodesLinks c… CWE-306
CWE-617
CWE-862
Missing Authentication for Critical Function
 Reachable Assertion
 Missing Authorization 		CVE-2026-44321 2026-05-29 03:01 2026-05-28 Show GitHub Exploit DB Packet Storm
1613 - - - Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. An attacker who knows how passwords are generated can easily crack the defaul… CWE-1391
 Use of Weak Credentials 		CVE-2026-4377 2026-05-29 03:00 2026-05-28 Show GitHub Exploit DB Packet Storm
1614 - - - A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's account by interacting with applicat… CWE-288
CWE-359
Authentication Bypass Using an Alternate Path or Channel
 Exposure of Private Personal Information to an Unauthorized Actor 		CVE-2026-8990 2026-05-29 03:00 2026-05-28 Show GitHub Exploit DB Packet Storm
1615 - - - A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulnerability stems from the the PSAdminAgent service, which creates a Named Pipe wi… CWE-22
CWE-269
CWE-284
CWE-732
Path Traversal
 Improper Privilege Management
Improper Access Control
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-9789 2026-05-29 02:58 2026-05-28 Show GitHub Exploit DB Packet Storm
1616 7.5 HIGH
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF terminates the entire process when a stored PFD-subscription notifyUri cannot be reached. In PfdChangeNo… CWE-20
CWE-617
CWE-755
 Improper Input Validation 
 Reachable Assertion
 Improper Handling of Exceptional Conditions 		CVE-2026-44319 2026-05-29 02:50 2026-05-28 Show GitHub Exploit DB Packet Storm
1617 7.5 HIGH
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/{afId}/transactions/{transId}/applications/{appId} handler panics with a n… CWE-476
CWE-754
 NULL Pointer Dereference
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-44322 2026-05-29 02:37 2026-05-28 Show GitHub Exploit DB Packet Storm
1618 4.3 MEDIUM
Network 		ibm business_automation_workflow IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages. CWE-209
Information Exposure Through an Error Message 		CVE-2026-1248 2026-05-29 02:19 2026-05-28 Show GitHub Exploit DB Packet Storm
1619 6.6 MEDIUM
Network 		jenkins active_directory Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-48918 2026-05-29 02:17 2026-05-28 Show GitHub Exploit DB Packet Storm
1620 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-9818 2026-05-29 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm