Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204461 7.8 重要
Local
Apache Software Foundation - Apache PDFBox における XML 外部エンティティ攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-2175 2016-06-3 14:29 2016-04-17 Show GitHub Exploit DB Packet Storm
204462 6.1 警告
Network
シトリックス・システムズ - Citrix NetScaler Gateway の vpn/js/gateway_login_form_view.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4945 2016-06-3 14:16 2016-05-26 Show GitHub Exploit DB Packet Storm
204463 7.5 重要
Network
シトリックス・システムズ - Citrix XenDesktop および XenApp 用 Citrix Studio における XenDesktop Delivery Controller にアクセスポリシー規則を設定される脆弱性 CWE-Other
その他
CVE-2016-4810 2016-06-3 14:16 2016-05-31 Show GitHub Exploit DB Packet Storm
204464 7.8 重要
Local
Debian
GNOME Project
- gdk-pixbuf の pixops/pixops.c の pixops_composite_nearest などの関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-8875 2016-06-3 12:17 2015-10-6 Show GitHub Exploit DB Packet Storm
204465 6.5 警告
Network
IBM - IBM Security AppScan における任意のファイルを読まれる脆弱性 CWE-Other
その他
CVE-2016-0288 2016-06-3 11:41 2016-05-17 Show GitHub Exploit DB Packet Storm
204466 7 危険 サイボウズ - サイボウズ ガルーンにおける LDAP インジェクションの脆弱性 CWE-noinfo
情報不足
CVE-2015-5649 2016-06-2 19:12 2015-10-7 Show GitHub Exploit DB Packet Storm
204467 4.3 警告
Network
Apache Software Foundation - Apache Cordova におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5207 2016-06-2 17:49 2016-05-11 Show GitHub Exploit DB Packet Storm
204468 9.8 緊急
Network
Sixnet - Sixnet BT-5xxx および BT-6xxx M2M デバイスにおけるアクセス権を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-4521 2016-06-2 16:55 2016-05-26 Show GitHub Exploit DB Packet Storm
204469 5.8 警告
Network
Moxa Inc. - Moxa UC-7408 LX-Plus デバイスにおけるファームウェアに書き込まれる脆弱性 CWE-Other
その他
CVE-2016-4500 2016-06-2 15:00 2016-05-31 Show GitHub Exploit DB Packet Storm
204470 7.5 重要
Network
Moxa Inc. - 複数の Moxa MiiNePort デバイス製品のファームウェアにおける重要な平文情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2295 2016-06-2 15:00 2016-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
791 7.5 HIGH
Network
- - MaxKB is an open-source AI assistant for enterprise. Prior to 2.9.0, MaxKB's webhook trigger endpoint (/api/trigger/v1/webhook/{trigger_id}) is accessible without authentication. The WebhookAuth clas… New CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
CVE-2026-44847 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
792 8.2 HIGH
Network
- - LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other ap… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-44843 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
793 5.9 MEDIUM
Network
- - view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the system test entrypoint canonicalizes a user-controlled file … New CWE-187
 Partial String Comparison
CVE-2026-44837 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
794 7.5 HIGH
Network
- - Banks generates meaningful LLM prompts using a template language that makes sense. Prior to 2.4.2, banks uses jinja2.Environment() (unsandboxed) to render prompt templates. Applications that pass use… New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-44209 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
795 4.9 MEDIUM
Network
- - Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which a… New CWE-202
 Exposure of Sensitive Information Through Data Queries
CVE-2026-42797 2026-05-27 06:16 2026-05-26 Show GitHub Exploit DB Packet Storm
796 - - - MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a broken access control vulnerability in the OSS file service URL fetch API (chat/api/oss/get_url). The en… New CWE-862
 Missing Authorization
CVE-2026-42337 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
797 - - - MaxKB is an open-source AI assistant for enterprise. MaxKB 2.8.0 and prior are vulnerable to a server-side request forgery (SSRF) bypass in the OSS file service URL fetch functionality due to inconsi… New CWE-367
CWE-918
 Time-of-check Time-of-use (TOCTOU) Race Condition
Server-Side Request Forgery (SSRF) 
CVE-2026-42336 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
798 - - - MaxKB is an open-source AI assistant for enterprise. Prior to 2.8.1, MaxKB v2.8.0 and prior are vulnerable to a server-side request forgery (SSRF) bypass in the OSS file service URL fetch (chat/api/o… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42335 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
799 9.8 CRITICAL
Network
- - IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the ap… New CWE-863
 Incorrect Authorization
CVE-2026-3660 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm
800 - - - AppLockZ App Lock and Fingerprint Lock (applock.passwordfingerprint.applockz) 4.2.11 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an ove… New - CVE-2025-68711 2026-05-27 06:16 2026-05-27 Show GitHub Exploit DB Packet Storm