Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205811 4 警告 Moodle - Moodle の rating コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
CWE-264
CVE-2015-5268 2016-03-2 16:24 2015-09-21 Show GitHub Exploit DB Packet Storm
205812 5 警告 Moodle - Moodle の lib/moodlelib.php におけるパスワードリカバリトークンを推測される脆弱性 CWE-200
CWE-Other
CVE-2015-5267 2016-03-2 16:23 2015-09-21 Show GitHub Exploit DB Packet Storm
205813 4 警告 Moodle - Moodle の wiki コンポーネントにおける任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5265 2016-03-2 16:23 2015-09-21 Show GitHub Exploit DB Packet Storm
205814 4.3 警告 Moodle - Moodle の SCORM モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3275 2016-03-2 16:23 2015-07-13 Show GitHub Exploit DB Packet Storm
205815 4.3 警告 Moodle - Moodle の user/lib.php の user_get_user_details 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3274 2016-03-2 16:23 2015-07-13 Show GitHub Exploit DB Packet Storm
205816 4 警告 Moodle - Moodle の mod/forum/post.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-3273 2016-03-2 16:23 2015-07-13 Show GitHub Exploit DB Packet Storm
205817 5.8 警告 Moodle - Moodle の lib/moodlelib.php の clean_param 関数におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2015-3272 2016-03-2 16:23 2015-07-13 Show GitHub Exploit DB Packet Storm
205818 4.3 警告 Wireshark - Wireshark の HiQnet ディセクタの epan/dissectors/packet-hiqnet.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2526 2016-03-2 15:13 2016-02-26 Show GitHub Exploit DB Packet Storm
205819 4.3 警告 Wireshark - Wireshark の HTTP/2 ディセクタの epan/dissectors/packet-http2.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2525 2016-03-2 15:13 2016-02-26 Show GitHub Exploit DB Packet Storm
205820 4.3 警告 Wireshark - Wireshark の X.509AF ディセクタの epan/dissectors/packet-x509af.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2524 2016-03-2 15:13 2016-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 6.5 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kruit Advanced Custom Fields: Font Awesome Field allows Stored XSS. This issue affects Ad… New CWE-79
Cross-site Scripting
CVE-2026-49044 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
152 4.3 MEDIUM
Network
- - Missing Authorization vulnerability in Benbodhi SVG Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SVG Support: from n/a through 2.5.14. New CWE-862
 Missing Authorization
CVE-2026-48973 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
153 - - - Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to w… New - CVE-2026-48922 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
154 - - - Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a… New - CVE-2026-48921 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
155 7.5 HIGH
Network
- - Taipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibrary.get_resource() method in taipy/gui/extension/library.py that allows unauthenticated attackers to es… New CWE-22
Path Traversal
CVE-2026-48544 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
156 6.1 MEDIUM
Network
- - Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the im… New CWE-79
Cross-site Scripting
CVE-2026-47119 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
157 6.5 MEDIUM
Network
- - Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint, whi… New CWE-22
Path Traversal
CVE-2026-47118 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
158 5.4 MEDIUM
Network
- - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside… New CWE-22
Path Traversal
CVE-2026-45571 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
159 - - - go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, go-git's SSH transport constructs the remote exec command by wrapping the repository path in … New CWE-116
 Improper Encoding or Escaping of Output
CVE-2026-45570 2026-05-28 00:16 2026-05-28 Show GitHub Exploit DB Packet Storm
160 8.6 HIGH
Network
- - Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy (the documented quickstart, no DOZZLE_AUTH_PROVIDER set), POST /api/notifications/test-webhook is re… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-45298 2026-05-28 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm