Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204421 7.5 重要
Network
Libksba project
Canonical
- Libksba の ber-decoder.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4353 2016-06-16 12:29 2016-05-17 Show GitHub Exploit DB Packet Storm
204422 6.1 警告
Network
Liferay - Liferay Portal の Profile Search 機能の users.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3670 2016-06-16 10:48 2016-03-22 Show GitHub Exploit DB Packet Storm
204423 9.8 緊急
Network
Puppet - Puppet Enterprise および Puppet Agent の pxp-agent コンポーネントにおけるブローカを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2016-2786 2016-06-16 10:10 2016-03-14 Show GitHub Exploit DB Packet Storm
204424 9.8 緊急
Network
Puppet - Puppet Server および Puppet ならびに Puppet Agent の Ruby puppetmaster における auth.conf へのアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-2785 2016-06-16 10:10 2016-04-26 Show GitHub Exploit DB Packet Storm
204425 5.3 警告
Network
KMC Controls - KMC Controls BAC-5051E デバイスのファームウェアにおけるアクセス制限を回避される脆弱性 CWE-310
CWE-Other
CVE-2016-4495 2016-06-15 17:28 2016-06-7 Show GitHub Exploit DB Packet Storm
204426 8.8 重要
Network
Mozilla Foundation - Windows 上で稼動する Mozilla Firefox で使用される ANGLE の TSymbolTableLevel クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2824 2016-06-15 17:11 2016-06-7 Show GitHub Exploit DB Packet Storm
204427 6.5 警告
Network
Apache Software Foundation - Apache CloudStack における認証を回避される脆弱性 CWE-287
CWE-Other
CVE-2016-3085 2016-06-15 17:04 2016-06-9 Show GitHub Exploit DB Packet Storm
204428 7.2 重要
Network
Apache Software Foundation - Apache Ranger のポリシー管理ツールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-2174 2016-06-15 17:04 2016-06-1 Show GitHub Exploit DB Packet Storm
204429 5.5 警告
Local
Canonical - LXD におけるコンテナディレクトリ内の任意の誰でも読み取り可能なパスにアクセスされる脆弱性 CWE-200
情報漏えい
CVE-2016-1582 2016-06-15 14:51 2016-05-30 Show GitHub Exploit DB Packet Storm
204430 5.5 警告
Local
Canonical - LXD における任意のコンテナからデータをコピーされる脆弱性 CWE-Other
その他
CVE-2016-1581 2016-06-15 14:51 2016-05-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1091 3.7 LOW
Network
adcisolutions node_view_permissions Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2… Update CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-8491 2026-05-28 00:00 2026-05-20 Show GitHub Exploit DB Packet Storm
1092 8.1 HIGH
Network
apache apache-airflow-providers-google Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network attac… New CWE-322
 Key Exchange without Entity Authentication
CVE-2026-45361 2026-05-27 23:59 2026-05-25 Show GitHub Exploit DB Packet Storm
1093 9.1 CRITICAL
Network
- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(fullPath) call throws, the method falls back to a dirname/basename split and only validates the directory … New CWE-88
Argument Injection
CVE-2026-44449 2026-05-27 23:57 2026-05-27 Show GitHub Exploit DB Packet Storm
1094 9.9 CRITICAL
Network
- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoint validates the command field against an allowlist of binary names but forwards the args array to the … New CWE-88
Argument Injection
CVE-2026-44450 2026-05-27 23:57 2026-05-27 Show GitHub Exploit DB Packet Storm
1095 7.1 HIGH
Network
- - The EventPress WordPress theme before 22.2 does not sanitize or escape the 'id' parameter in the eventpress_customizer_notify_dismiss_action AJAX handler before outputting it back in the response, al… New CWE-79
Cross-site Scripting
CVE-2026-6268 2026-05-27 23:55 2026-05-27 Show GitHub Exploit DB Packet Storm
1096 8.8 HIGH
Adjacent
- - An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond. New CWE-290
 Authentication Bypass by Spoofing
CVE-2026-8676 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1097 9.8 CRITICAL
Network
- - There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access) An unauthenticated remote attacker can access configured databases in a DIAView project. New CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-9642 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1098 7.1 HIGH
Network
- - A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject A… New CWE-295
Improper Certificate Validation 
CVE-2026-42012 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1099 8.2 HIGH
Network
- - A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) fiel… New CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-42013 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1100 5.3 MEDIUM
Network
- - A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when app… New CWE-193
 Off-by-one Error
CVE-2026-42015 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm