Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204611 6.1 警告
Network
WordPress.org
Moxiecode Systems
- WordPress で使用される Plupload の plupload.flash.swf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4566 2016-05-25 16:57 2016-05-15 Show GitHub Exploit DB Packet Storm
204612 8.6 重要
Network
WordPress.org - WordPress の wp-includes/http.php の wp_http_validate_url 関数におけるサーバサイドのリクエストフォージェリ攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-2222 2016-05-25 16:57 2016-02-2 Show GitHub Exploit DB Packet Storm
204613 7.4 重要
Network
WordPress.org - WordPress の wp-includes/pluggable.php の wp_validate_redirect 関数におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2016-2221 2016-05-25 16:57 2016-02-2 Show GitHub Exploit DB Packet Storm
204614 6.1 警告
Network
WordPress.org - WordPress の wp-includes/class-wp-theme.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1564 2016-05-25 16:57 2016-01-6 Show GitHub Exploit DB Packet Storm
204615 6.1 警告
Network
WordPress.org - WordPress の wp-includes/wp-db.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8834 2016-05-25 16:57 2015-05-6 Show GitHub Exploit DB Packet Storm
204616 5.4 警告
Network
WordPress.org - WordPress のユーザリストのテーブルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-7989 2016-05-25 16:57 2015-09-15 Show GitHub Exploit DB Packet Storm
204617 4.3 警告
Network
WordPress.org - WordPress の XMLRPC サブシステムの wp-includes/class-wp-xmlrpc-server.php の mw_editPost 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5715 2016-05-25 16:57 2015-09-15 Show GitHub Exploit DB Packet Storm
204618 4.3 警告
Network
The PHP Group
Facebook
- PHP の ext/zip/php_zip.c および HHVM の ext/zip/ext_zip.cpp の ZipArchive::extractTo 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-9767 2016-05-25 16:55 2014-09-10 Show GitHub Exploit DB Packet Storm
204619 9.8 緊急
Network
The PHP Group - PHP の ext/standard/string.c の str_pad 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2016-4346 2016-05-25 16:28 2016-03-3 Show GitHub Exploit DB Packet Storm
204620 9.8 緊急
Network
The PHP Group - PHP の ext/filter/sanitizing_filters.c の php_filter_encode_url 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2016-4345 2016-05-25 16:28 2016-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 4.4 MEDIUM
Network
- - IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting … New - CVE-2026-5516 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
232 5.5 MEDIUM
Local
- - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap. New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-6051 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
233 5.5 MEDIUM
Local
- - IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables. New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-6053 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
234 6.5 MEDIUM
Network
- - IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language Environment (ILE) compiler. An authenticated attacker could exploit th… New CWE-674
 Uncontrolled Recursion
CVE-2026-6936 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
235 6.5 MEDIUM
Network
- - IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query. New CWE-285
Improper Authorization
CVE-2026-6938 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
236 8.4 HIGH
Local
- - IBM Operations Analytics - Log Analysis  and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, w… New CWE-1392
 Use of Default Credentials
CVE-2026-7365 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
237 9.8 CRITICAL
Network
- - IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links during archive extraction. New CWE-22
Path Traversal
CVE-2026-7524 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
238 7.1 HIGH
Network
- - IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption. New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-7528 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
239 - - - IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 New CWE-287
Improper Authentication
CVE-2026-7876 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
240 9.8 CRITICAL
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… New CWE-122
Heap-based Buffer Overflow
CVE-2026-8175 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm