Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206631 6 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における RBR に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2436 2015-10-30 16:46 2014-04-15 Show GitHub Exploit DB Packet Storm
206632 2.8 注意 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Federated に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2432 2015-10-30 16:46 2014-04-15 Show GitHub Exploit DB Packet Storm
206633 2.6 注意 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Options に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2431 2015-10-30 16:46 2014-04-15 Show GitHub Exploit DB Packet Storm
206634 3.5 注意 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Performance Schema に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2430 2015-10-30 16:46 2014-04-15 Show GitHub Exploit DB Packet Storm
206635 4 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Partition に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2419 2015-10-30 16:46 2014-04-15 Show GitHub Exploit DB Packet Storm
206636 4 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における XML に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0384 2015-10-30 16:46 2014-04-15 Show GitHub Exploit DB Packet Storm
206637 2.8 注意 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Replication に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0420 2015-10-30 16:46 2014-01-14 Show GitHub Exploit DB Packet Storm
206638 2.4 注意 Apache Software Foundation - Subversion の daemonize.py モジュールにおける権限を取得される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-7393 2015-10-30 16:46 2013-08-22 Show GitHub Exploit DB Packet Storm
206639 5 警告 Fedora Project
json-c project		 - json-c の printbuf API におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-6370 2015-10-30 16:46 2013-11-19 Show GitHub Exploit DB Packet Storm
206640 4 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Partition に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5891 2015-10-30 16:44 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 6.5 MEDIUM
Network 		frappe erpnext ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyo… New CWE-862
 Missing Authorization 		CVE-2026-44448 2026-05-16 01:20 2026-05-14 Show GitHub Exploit DB Packet Storm
302 9.1 CRITICAL
Network 		opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell scrip… New CWE-88
Argument Injection 		CVE-2026-45158 2026-05-16 01:19 2026-05-14 Show GitHub Exploit DB Packet Storm
303 4.3 MEDIUM
Network 		- - Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium sec… New CWE-284
Improper Access Control 		CVE-2026-8566 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
304 4.3 MEDIUM
Network 		- - Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se… New CWE-693
 Protection Mechanism Failure 		CVE-2026-8563 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
305 4.3 MEDIUM
Network 		- - Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a … New CWE-20
 Improper Input Validation  		CVE-2026-8528 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
306 6.5 MEDIUM
Network 		- - Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default session id generator re… New CWE-338
CWE-340
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
 Generation of Predictable Numbers or Identifiers 		CVE-2026-8503 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
307 - - - Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-contr… New CWE-77
Command Injection 		CVE-2026-46508 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
308 - - - Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the l… New CWE-352
CWE-384
 Origin Validation Error
 Session Fixation 		CVE-2026-45773 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
309 - - - Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted reposi… New CWE-426
 Untrusted Search Path 		CVE-2026-45772 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
310 7.3 HIGH
Network 		- - Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a shell process and writes attacker-controlled command strings directly to the proce… New CWE-77
Command Injection 		CVE-2026-39054 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm