Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205761 6.8 警告 Mozilla Foundation - Windows 上で稼動する Mozilla Firefox の WebRTC の実装の I420VideoFrame::CreateFrame 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-1971 2016-03-22 10:23 2016-03-8 Show GitHub Exploit DB Packet Storm
205762 6.8 警告 Mozilla Foundation - Windows 上で稼動する Mozilla Firefox の WebRTC の実装の srtp_unprotect 関数における整数アンダーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-1970 2016-03-22 10:23 2016-03-8 Show GitHub Exploit DB Packet Storm
205763 5.5 警告 シスコシステムズ - Cisco Prime Infrastructure における任意のファイルを読まれる脆弱性 CWE-119
バッファエラー 		CVE-2016-1358 2016-03-18 18:22 2016-03-3 Show GitHub Exploit DB Packet Storm
205764 9 危険 シスコシステムズ - Cisco Application Control Engine の Device Manager GUI における RBAC 制限を回避される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2016-1297 2016-03-18 18:22 2016-02-24 Show GitHub Exploit DB Packet Storm
205765 7.8 危険 シスコシステムズ - 複数の Cisco Nexus デバイスおよび Unified Computing System 上で稼動する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-0718 2016-03-18 18:22 2015-01-7 Show GitHub Exploit DB Packet Storm
205766 5 警告 Swann - Swann SRNVW-470LCD および SWNVW-470CAM デバイスのファームウェアにおけるライブ映像を閲覧される脆弱性 CWE-Other
その他 		CVE-2015-8287 2016-03-18 17:54 2015-11-19 Show GitHub Exploit DB Packet Storm
205767 3.5 注意 IBM - IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0262 2016-03-18 15:51 2016-02-26 Show GitHub Exploit DB Packet Storm
205768 4 警告 IBM - IBM Maximo Asset Management におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-0222 2016-03-18 15:51 2016-02-26 Show GitHub Exploit DB Packet Storm
205769 4.3 警告 IBM - IBM WebSphere Commerce におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-0208 2016-03-18 15:51 2016-03-7 Show GitHub Exploit DB Packet Storm
205770 6.8 警告 IBM - IBM FlashSystem V9000 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-7446 2016-03-18 15:18 2015-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 4.3 MEDIUM
Network 		jenkins bitbucket_oauth Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. New CWE-601
Open Redirect 		CVE-2026-48924 2026-05-29 01:59 2026-05-28 Show GitHub Exploit DB Packet Storm
132 4.3 MEDIUM
Network 		kostyasha github_integration A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request. New CWE-352
 Origin Validation Error 		CVE-2026-48925 2026-05-29 01:57 2026-05-28 Show GitHub Exploit DB Packet Storm
133 6.5 MEDIUM
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions han… New CWE-704
CWE-754
 Incorrect Type Conversion or Cast
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-44324 2026-05-29 01:52 2026-05-28 Show GitHub Exploit DB Packet Storm
134 5.5 MEDIUM
Network 		jenkins buildgraph-view Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views. New CWE-79
Cross-site Scripting 		CVE-2026-48927 2026-05-29 01:52 2026-05-28 Show GitHub Exploit DB Packet Storm
135 7.5 HIGH
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug family. The handler in N… New CWE-20
CWE-755
CWE-843
 Improper Input Validation 
 Improper Handling of Exceptional Conditions
Type Confusion 		CVE-2026-44325 2026-05-29 01:51 2026-05-28 Show GitHub Exploit DB Packet Storm
136 4.3 MEDIUM
Network 		jenkins multijob A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds. New CWE-352
 Origin Validation Error 		CVE-2026-9674 2026-05-29 01:51 2026-05-28 Show GitHub Exploit DB Packet Storm
137 5.4 MEDIUM
Network 		synology contacts Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users … New CWE-79
Cross-site Scripting 		CVE-2025-13167 2026-05-29 01:37 2026-05-27 Show GitHub Exploit DB Packet Storm
138 9.4 CRITICAL
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-influence API without inbound OAuth2/bearer-token authorization. A network attac… New CWE-862
 Missing Authorization 		CVE-2026-44326 2026-05-29 01:25 2026-05-28 Show GitHub Exploit DB Packet Storm
139 10.0 CRITICAL
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization. A network attacker wh… New CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2026-44327 2026-05-29 01:24 2026-05-28 Show GitHub Exploit DB Packet Storm
140 8.2 HIGH
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. On top of that, the DELETE /upi… New CWE-306
CWE-476
CWE-862
Missing Authentication for Critical Function
 NULL Pointer Dereference
 Missing Authorization 		CVE-2026-44328 2026-05-29 01:24 2026-05-28 Show GitHub Exploit DB Packet Storm