Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
205571	9.8	緊急 Network	アドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-1022	2016-04-15 18:16	2016-04-7	Show	GitHub Exploit DB Packet Storm

205572	5.7	警告 Network	Canonical JasPer Project	-	JasPer の jas_iccprof_createfrombuf 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-2116	2016-04-15 18:06	2016-03-3	Show	GitHub Exploit DB Packet Storm

205573	7.6	重要 Network	Canonical JasPer Project	-	JasPer の jas_iccattrval_destroy 関数におけるメモリ二重解放の脆弱性	CWE-Other その他	CVE-2016-1577	2016-04-15 18:06	2016-03-3	Show	GitHub Exploit DB Packet Storm

205574	6.1	警告 Network	シスコシステムズ	-	Cisco Unity Connection におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1377	2016-04-15 16:07	2016-04-12	Show	GitHub Exploit DB Packet Storm

205575	6.1	警告 Network	シスコシステムズ	-	Cisco IP Interoperability and Collaboration System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1375	2016-04-15 16:07	2016-04-7	Show	GitHub Exploit DB Packet Storm

205576	5.3	警告 Network	Lenovo	-	複数の LenovoEMC 製品の管理インターフェースにおける重要なデバイス情報を取得される脆弱性	CWE-Other その他	CVE-2015-8108	2016-04-15 14:58	2015-11-11	Show	GitHub Exploit DB Packet Storm

205577	7.8	重要 Local	Lenovo	-	Lenovo Fingerprint Manager および Touch Fingerprint における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2393	2016-04-15 14:58	2016-03-22	Show	GitHub Exploit DB Packet Storm

205578	9.1	緊急 Network	PostgreSQL.org	-	PostgreSQL の pageinspect エクステンションの brin_page_type および brin_metapage_info 機能におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3065	2016-04-15 14:32	2016-03-31	Show	GitHub Exploit DB Packet Storm

205579	7.5	重要 Network	PostgreSQL.org	-	PostgreSQL におけるアクセス制限を回避される脆弱性	CWE-Other その他	CVE-2016-2193	2016-04-15 14:31	2016-03-31	Show	GitHub Exploit DB Packet Storm

205580	9.8	緊急 Network	アドビシステムズ Google	-	Adobe Flash Player におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-1030	2016-04-15 14:27	2016-04-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311	5.3	MEDIUM Network	-	-	liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Prior to 0.16.0, an out-of-bounds read has been identified in the XMSS and XMSS^MT … New	CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read	CVE-2026-44518	2026-05-30 04:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

312	5.4	MEDIUM Adjacent	-	-	An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes. New	CWE-522 Insufficiently Protected Credentials	CVE-2026-42951	2026-05-30 04:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

313	8.3	HIGH Adjacent	-	-	The Danelec MacGregor Voyage Data Recorder device includes a default username and password, with no enforced password change. New	CWE-1392 Use of Default Credentials	CVE-2026-42941	2026-05-30 04:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

314	8.3	HIGH Adjacent	-	-	Danelec MacGregor Voyage Data Recorder includes default accounts with hard-coded credentials. New	CWE-798 Use of Hard-coded Credentials	CVE-2026-42929	2026-05-30 04:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

315	5.7	MEDIUM Adjacent	-	-	The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password. New	CWE-552 Files or Directories Accessible to External Parties	CVE-2026-40425	2026-05-30 04:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

316	7.5	HIGH Network	tanium	server	Tanium addressed a denial of service vulnerability in Tanium Server. Update	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2026-9156	2026-05-30 04:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

317	7.8	HIGH Local	synology	beedrive	Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspecified vectors. Update	CWE-427 Uncontrolled Search Path Element	CVE-2023-52945	2026-05-30 04:13	2026-05-27	Show	GitHub Exploit DB Packet Storm

318	8.8	HIGH Local	docker	docker_desktop	The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When ECI is enabled, Docker socket mounts from containers are denied unless explicitly… Update	CWE-863 Incorrect Authorization	CVE-2026-6406	2026-05-30 04:02	2026-05-23	Show	GitHub Exploit DB Packet Storm

319	6.1	MEDIUM Network	heartcombo	devise	Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module is enabled in Devise, the FailureApp#redirect_url method returns request.refer… Update	CWE-601 Open Redirect	CVE-2026-40295	2026-05-30 03:55	2026-05-23	Show	GitHub Exploit DB Packet Storm

320	5.5	MEDIUM Local	bentoml	bentoml	BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attacker-controlled symli… Update	CWE-59 Link Following	CVE-2026-40610	2026-05-30 03:53	2026-05-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed