Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
206571 6.8 警告 Ipswitch, Inc. - Ipswitch MOVEit Mobile におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-7678 2016-02-19 15:41 2015-09-23 Show GitHub Exploit DB Packet Storm
206572 4 警告 Ipswitch, Inc. - Ipswitch MOVEit DMZ および MOVEit Mobile の機能における認証を回避される脆弱性 CWE-200
情報漏えい
CVE-2015-7675 2016-02-19 15:41 2015-10-20 Show GitHub Exploit DB Packet Storm
206573 4.3 警告 Tollgrade Communications, Inc. - Tollgrade SmartGrid LightHouse Sensor Management System Software EMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0866 2016-02-19 15:15 2016-02-9 Show GitHub Exploit DB Packet Storm
206574 9 危険 Tollgrade Communications, Inc. - Tollgrade SmartGrid LightHouse Sensor Management System Software EMS における任意のパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-0865 2016-02-19 15:15 2016-02-9 Show GitHub Exploit DB Packet Storm
206575 5 警告 Tollgrade Communications, Inc. - Tollgrade SmartGrid LightHouse Sensor Management System Software EMS における重要なレポートおよびユーザ名情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0864 2016-02-19 15:15 2016-02-9 Show GitHub Exploit DB Packet Storm
206576 5 警告 シスコシステムズ - Cisco Jabber Guest と連携して使用される TelePresence Video Communication Server における重要な通話統計情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-1316 2016-02-19 14:01 2016-02-8 Show GitHub Exploit DB Packet Storm
206577 6.8 警告 MIT Kerberos - MIT Kerberos 5 の kadmind の kadmin/server/server_stubs.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-8631 2016-02-19 13:37 2015-12-23 Show GitHub Exploit DB Packet Storm
206578 2.1 注意 MIT Kerberos - MIT Kerberos 5 の kadmind の lib/kadm5/kadm_rpc_xdr.c の xdr_nullstring 関数における重要な情報を取得される脆弱性 CWE-119
CWE-200
CVE-2015-8629 2016-02-19 13:37 2015-12-23 Show GitHub Exploit DB Packet Storm
206579 5 警告 IBM - IBM Security QRadar SIEM における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-2005 2016-02-19 12:00 2015-02-19 Show GitHub Exploit DB Packet Storm
206580 5 警告 シーメンス - Siemens SIMATIC S7-1500 CPU デバイスにおけるリプレイ保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-2201 2016-02-19 11:52 2016-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1951 7.8 HIGH
Local
- - IBM Netezza Performance Server Replication Services 3.0.2.0 through 3.0.5.0 allows an attacker with low‑privileged access to escalate their privileges to root. By exploiting this flaw, the attacker c… CWE-250
 Execution with Unnecessary Privileges
CVE-2026-3623 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1952 6.5 MEDIUM
Network
- - IBM Cloud APM, Base Private 8.1.4 and IBM Cloud APM, Advanced Private 8.1.4 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial of se… CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-3676 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1953 9.8 CRITICAL
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-122
Heap-based Buffer Overflow
CVE-2026-8175 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1954 8.8 HIGH
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-121
Stack-based Buffer Overflow
CVE-2026-8179 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1955 7.5 HIGH
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-476
 NULL Pointer Dereference
CVE-2026-8180 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1956 6.5 MEDIUM
Network
- - IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credentials in debug mode. CWE-200
Information Exposure
CVE-2026-8405 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1957 6.5 MEDIUM
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-22
Path Traversal
CVE-2026-9035 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1958 8.8 HIGH
Network
- - The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data verification mechanism, … CWE-347
 Improper Verification of Cryptographic Signature
CVE-2025-41669 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1959 7.8 HIGH
Local
- - A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the … CWE-427
 Uncontrolled Search Path Element
CVE-2025-41670 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
1960 7.5 HIGH
Network
- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This… CWE-89
SQL Injection
CVE-2026-40810 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm