Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204481 7.5 重要
Network
GNU Project
openSUSE project
- GNU C Library の sysdeps/posix/getaddrinfo.c の getaddrinfo 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-3706 2016-06-14 12:23 2016-04-29 Show GitHub Exploit DB Packet Storm
204482 9.8 緊急
Network
DELL EMC (旧 EMC Corporation) - EMC NetWorker における任意のコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2016-0916 2016-06-14 12:04 2016-06-8 Show GitHub Exploit DB Packet Storm
204483 8.8 重要
Local
DELL EMC (旧 EMC Corporation) - EMC Data Domain オペレーティングシステムにおける任意のアカウントをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0910 2016-06-14 12:04 2016-06-8 Show GitHub Exploit DB Packet Storm
204484 8.1 重要
Adjacent
シスコシステムズ - Cisco Aironet アクセスポイントデバイスのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1419 2016-06-14 11:47 2016-06-9 Show GitHub Exploit DB Packet Storm
204485 7.8 重要
Local
シスコシステムズ - 複数の Cisco Aironet アクセスポイントのソフトウェアにおける Linux の root アクセス権を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1418 2016-06-13 17:22 2016-06-6 Show GitHub Exploit DB Packet Storm
204486 9.8 緊急
Network
General Electric Company - General Electric Multilink スイッチのファームウェアにおける構成設定を変更される脆弱性 CWE-Other
その他
CVE-2016-2310 2016-06-13 17:07 2016-06-7 Show GitHub Exploit DB Packet Storm
204487 9.8 緊急
Network
VideoLAN
Debian
- VideoLAN VLC media player の modules/codec/adpcm.c の DecodeAdpcmImaQT 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5108 2016-06-13 16:52 2016-06-7 Show GitHub Exploit DB Packet Storm
204488 8.8 重要
Network
- HPE Project and Portfolio Management Center における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-4370 2016-06-13 16:29 2016-06-8 Show GitHub Exploit DB Packet Storm
204489 8.8 重要
Network
ヒューレット・パッカード・エンタープライズ - HPE Discovery and Dependency Mapping Inventory における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-4369 2016-06-13 16:29 2016-06-6 Show GitHub Exploit DB Packet Storm
204490 9.8 緊急
Network
ヒューレット・パッカード・エンタープライズ - HPE Universal CMDB などの製品における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-4368 2016-06-13 16:29 2016-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1131 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and realier, in src/mistune/directives/image.py, the render_figure() function concatenates figclass and figwidth options direc… CWE-79
Cross-site Scripting
CVE-2026-44896 2026-05-28 22:43 2026-05-27 Show GitHub Exploit DB Packet Storm
1132 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, HTMLRenderer.heading() builds the opening <hN> tag by string-concatenating the id attribute value directly into the HTM… CWE-79
Cross-site Scripting
CVE-2026-44897 2026-05-28 22:42 2026-05-27 Show GitHub Exploit DB Packet Storm
1133 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_toc_ul() builds a <ul> table-of-contents tree from a list of (level, id, text) tuples. Both the id value (used a… CWE-79
Cross-site Scripting
CVE-2026-44898 2026-05-28 22:42 2026-05-27 Show GitHub Exploit DB Packet Storm
1134 5.4 MEDIUM
Network
apache shiro Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login. In affected versions, insufficient validation of this client-controlled value coul… CWE-601
Open Redirect
CVE-2026-48589 2026-05-28 22:38 2026-05-26 Show GitHub Exploit DB Packet Storm
1135 6.1 MEDIUM
Network
mistune_project mistune Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the Image directive plugin validates the :width: and :height: options with a regex compiled as _num_re = re.compile(r"^… CWE-79
Cross-site Scripting
CVE-2026-44899 2026-05-28 22:38 2026-05-27 Show GitHub Exploit DB Packet Storm
1136 8.8 HIGH
Network
tanium connect Tanium addressed an unauthorized code execution vulnerability in Connect. CWE-78
OS Command 
CVE-2026-9207 2026-05-28 22:31 2026-05-27 Show GitHub Exploit DB Packet Storm
1137 10.0 CRITICAL
Network
free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-pfdmanagement route group without inbound OAuth2/bearer-token authorization. A network a… CWE-863
 Incorrect Authorization
CVE-2026-44330 2026-05-28 22:06 2026-05-28 Show GitHub Exploit DB Packet Storm
1138 7.5 HIGH
Network
- - The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <7.13.8, and <7.10.12 accepts a client-supplied IMessage object and passes it dir… CWE-284
Improper Access Control
CVE-2026-32995 2026-05-28 14:16 2026-05-28 Show GitHub Exploit DB Packet Storm
1139 9.9 CRITICAL
Network
- - A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation whe… CWE-59
Link Following
CVE-2026-7374 2026-05-28 12:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1140 7.2 HIGH
Network
apache syncope Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted c… CWE-653
 Improper Isolation or Compartmentalization
CVE-2026-42782 2026-05-28 06:16 2026-05-26 Show GitHub Exploit DB Packet Storm