Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205731 7.2 危険 アップル - 複数の Apple 製品の IOKit における権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-1720 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
205732 7.2 危険 アップル - 複数の Apple 製品の IOHIDFamily API における権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-1719 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
205733 7.2 危険 アップル - 複数の Apple 製品のディスクイメージコンポーネントにおける権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-1717 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
205734 8.3 危険 アップル
Google		 - Android のカーネルの Broadcom Wi-Fi ドライバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0802 2016-03-29 15:41 2016-02-1 Show GitHub Exploit DB Packet Storm
205735 8.3 危険 アップル
Google		 - Android のカーネルの Broadcom Wi-Fi ドライバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0801 2016-03-29 15:41 2016-02-1 Show GitHub Exploit DB Packet Storm
205736 10 危険 アップル
nghttp2 project		 - nghttp2 のアイドル状態のストリーム処理における脆弱性 CWE-119
バッファエラー 		CVE-2015-8659 2016-03-29 15:41 2015-12-23 Show GitHub Exploit DB Packet Storm
205737 5.8 警告 アップル
xmlsoft.org
Canonical
レッドハット		 - libxml2 の HTML パーサの push インターフェースの SAX2.c の xmlSAX2TextNode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8242 2016-03-29 15:41 2015-11-20 Show GitHub Exploit DB Packet Storm
205738 7.5 危険 アップル
PNG Development Group		 - libpng の pngrutil.c 内の png_read_IDAT_data 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-0973 2016-03-29 15:40 2015-01-9 Show GitHub Exploit DB Packet Storm
205739 10 危険 アップル
PNG Development Group		 - libpng の png_combine_row 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-9495 2016-03-29 15:40 2014-12-22 Show GitHub Exploit DB Packet Storm
205740 4.7 警告
Network 		Huseyin Berberoglu - WordPress 用プラグイン WP Favorite Posts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1160 2016-03-29 15:39 2016-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281 7.1 HIGH
Network 		- - Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token… New CWE-863
 Incorrect Authorization 		CVE-2026-42280 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
282 7.5 HIGH
Network 		- - opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics en… New CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2026-44902 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
283 - - - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in … New CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-45570 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
284 5.4 MEDIUM
Network 		- - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside… New CWE-22
Path Traversal 		CVE-2026-45571 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
285 - - - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs from upstream Git. When commit o… New CWE-180
CWE-345
 Incorrect Behavior Order: Validate Before Canonicalize
 Insufficient Verification of Data Authenticity 		CVE-2026-45022 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
286 6.8 MEDIUM
Network 		- - Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across… New CWE-384
 Session Fixation 		CVE-2026-48545 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
287 8.0 HIGH
Network 		- - Mattermost Plugins versions <=1.1.5 fail to sanitize filenames received from federated peers before using them to construct export destination paths, which allows an administrator of a remote federat… New CWE-22
Path Traversal 		CVE-2026-6957 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
288 5.5 MEDIUM
Local 		- - ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service New CWE-476
 NULL Pointer Dereference 		CVE-2026-9759 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
289 - - - claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.sh (introduced in v3.5.0) interpolates Claude Code's hook stdin payload directl… New CWE-78
CWE-94
OS Command 
Code Injection 		CVE-2026-45136 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm
290 - - - Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP security guidelines. Howev… New CWE-942
 Permissive Cross-domain Policy with Untrusted Domains 		CVE-2026-9739 2026-05-30 00:42 2026-05-28 Show GitHub Exploit DB Packet Storm