Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205811 7.5 重要
Network
日本電気 - CLUSTERPRO X におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1145 2016-03-16 14:23 2016-01-29 Show GitHub Exploit DB Packet Storm
205812 7.1 重要
Network
株式会社コレガ - コレガ製の複数の無線 LAN ルータにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1158 2016-03-16 13:45 2016-03-2 Show GitHub Exploit DB Packet Storm
205813 2.6 注意 ISC, Inc. - ISC BIND 9 Supported Preview Edition の rdataset.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1284 2016-03-16 12:29 2016-01-26 Show GitHub Exploit DB Packet Storm
205814 6.6 警告 Google - Android のセットアップ ウィザードにおける Factory Reset Protection 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0813 2016-03-16 12:26 2016-02-1 Show GitHub Exploit DB Packet Storm
205815 6.6 警告 Google - Android のセットアップ ウィザードにおける Factory Reset Protection 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0812 2016-03-16 12:26 2016-02-1 Show GitHub Exploit DB Packet Storm
205816 7.8 危険 Google - Android の libmediaplayerservice の media/libmedia/ICrypto.cpp 関数における整数オーバーフローの脆弱性 CWE-200
情報漏えい
CVE-2016-0811 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
205817 6.9 警告 Google - Android のメディアサーバの media/libmedia/SoundPool.cpp における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0810 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
205818 8.3 危険 Google - Android の Wi-Fi の bcmdhd/wifi_hal/wifi_hal.cpp の wifi_cleanup 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0809 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
205819 4.9 警告 Google - Android の Minikin ライブラリの CmapCoverage.cpp の getCoverageFormat12 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-0808 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
205820 7.2 危険 Google - Android の Debuggerd の elf_utils.cpp の get_build_id 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0807 2016-03-16 12:15 2016-02-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
441 - - - A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server. New CWE-36
 Absolute Path Traversal
CVE-2026-32997 2026-05-28 14:16 2026-05-28 Show GitHub Exploit DB Packet Storm
442 - - - This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. New CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-32996 2026-05-28 14:16 2026-05-28 Show GitHub Exploit DB Packet Storm
443 7.5 HIGH
Network
- - The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <7.13.8, and <7.10.12 accepts a client-supplied IMessage object and passes it dir… New CWE-284
Improper Access Control
CVE-2026-32995 2026-05-28 14:16 2026-05-28 Show GitHub Exploit DB Packet Storm
444 9.9 CRITICAL
Network
- - A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation whe… New CWE-59
Link Following
CVE-2026-7374 2026-05-28 12:16 2026-05-26 Show GitHub Exploit DB Packet Storm
445 - - - Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP security guidelines. Howev… New CWE-942
 Permissive Cross-domain Policy with Untrusted Domains
CVE-2026-9739 2026-05-28 08:16 2026-05-28 Show GitHub Exploit DB Packet Storm
446 8.8 HIGH
Network
- - Tanium addressed an unauthorized code execution vulnerability in Connect. New CWE-78
OS Command 
CVE-2026-9208 2026-05-28 07:16 2026-05-28 Show GitHub Exploit DB Packet Storm
447 9.8 CRITICAL
Network
- - The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From 4.8.0 to before 26.04.1, the Goobi viewer REST endpoint POST /api/v1/index/stream accepted … New CWE-306
Missing Authentication for Critical Function
CVE-2026-45083 2026-05-28 07:16 2026-05-28 Show GitHub Exploit DB Packet Storm
448 - - - OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access… New CWE-287
CWE-347
Improper Authentication
 Improper Verification of Cryptographic Signature
CVE-2026-44720 2026-05-28 07:16 2026-05-28 Show GitHub Exploit DB Packet Storm
449 6.8 MEDIUM
Adjacent
- - Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluste… New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-44247 2026-05-28 07:16 2026-05-28 Show GitHub Exploit DB Packet Storm
450 9.8 CRITICAL
Network
- - Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo,… New CWE-306
Missing Authentication for Critical Function
CVE-2026-8364 2026-05-28 06:16 2026-05-28 Show GitHub Exploit DB Packet Storm