Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205741 5 警告 Google - Android のメディアサーバの libs/gui/IGraphicBufferConsumer.cpp における重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-0829 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205742 5 警告 Google - Android のメディアサーバの libs/gui/IGraphicBufferConsumer.cpp における重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-0828 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205743 9.3 危険 Google - Android のメディアサーバの libeffects における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2016-0827 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205744 9.3 危険 Google - Android のメディアサーバの libcameraservice における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0826 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205745 5 警告 Google - Android の Widevine Trusted Application における重要な TrustZone セキュアストレージ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-0825 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205746 5 警告 Google - Android の libstagefright の libmpeg2 における重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-0824 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205747 2.1 注意 Google
Linux		 - Android で使用される Linux Kernel の fs/proc/task_mmu.c における重要な物理アドレス情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-0823 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205748 7.6 危険 Google - Android の MediaTek 接続カーネルドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0822 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205749 5 警告 Google
Linux		 - Android で使用される Linux Kernel の include/linux/poison.h におけるポイズンポインタ保護メカニズムを回避される脆弱性 CWE-Other
その他 		CVE-2016-0821 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
205750 9.3 危険 Google - Android の MediaTek Wi-Fi カーネルドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0820 2016-03-22 15:57 2016-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 - - - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs from upstream Git. When commit o… New CWE-180
CWE-345
 Incorrect Behavior Order: Validate Before Canonicalize
 Insufficient Verification of Data Authenticity 		CVE-2026-45022 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
162 8.8 HIGH
Network 		- - LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but… New CWE-787
 Out-of-bounds Write 		CVE-2026-44988 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
163 5.0 MEDIUM
Local 		- - GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-read… New CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-44972 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
164 7.5 HIGH
Network 		- - opentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTTP request crashes any Node.js process running the OpenTelemetry JS Prometheus exporter. The metrics en… New CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2026-44902 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
165 - - - RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13. New CWE-80
Basic XSS 		CVE-2026-44839 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
166 - - - RabbitMQ is a messaging and streaming broker. From 4.2.0 to before 4.2.4, RabbitMQ's MQTT plugin allows for topic-level authorization using regular expressions with variable substitution. Administrat… New CWE-863
 Incorrect Authorization 		CVE-2026-44838 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
167 - - - Nocturne Memory is a lightweight, rollbackable, and visual Long-Term Memory Server for MCP Agents. Prior to 2.4.1, when API_TOKEN is unset or empty, the BearerTokenAuthMiddleware bypasses authenticat… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-44830 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
168 6.1 MEDIUM
Network 		- - Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, the mistune math plugin renders inline math ($...$) and block math ($$...$$) by concatenating the raw user-supplied con… New CWE-79
Cross-site Scripting 		CVE-2026-44708 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
169 9.8 CRITICAL
Network 		- - FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, AccessControlInterceptor, the authentication gate for all Struts2 actions, unconditionally calls invocation.invo… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-44668 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
170 9.1 CRITICAL
Network 		- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the Spindle extension build pipeline calls bun install without the --ignore-scripts flag before running the static backend safety sca… New CWE-78
OS Command  		CVE-2026-44444 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm