Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
206701	4	警告	Ipsilon project	-	Ipsilon の Identity Provider サーバの providers/saml2/admin.py におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-5217	2015-11-19 13:41	2015-09-8	Show	GitHub Exploit DB Packet Storm

206702	5	警告	GNU Project	-	GNU Compiler Collection の libstdc++ の std::random_device クラスにおけるランダム値を予測される脆弱性	CWE-200 情報漏えい	CVE-2015-5276	2015-11-19 13:35	2015-10-2	Show	GitHub Exploit DB Packet Storm

206703	5	警告	GNOME Project	-	GNOME NetworkManager におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-0272	2015-11-19 12:15	2015-03-9	Show	GitHub Exploit DB Packet Storm

206704	4.9	警告	Xen プロジェクト	-	Xen の arch/arm/domain.c の hypercall_create_continuation 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-7812	2015-11-19 12:08	2015-10-29	Show	GitHub Exploit DB Packet Storm

206705	9.3	危険	Erik de Castro Lopo	-	libsndfile におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2015-7805	2015-11-19 11:36	2015-10-7	Show	GitHub Exploit DB Packet Storm

206706	7.5	危険	FFmpeg	-	FFmpeg の libavcodec/jpeg2000dec.c の init_tile 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8219	2015-11-18 11:54	2015-11-7	Show	GitHub Exploit DB Packet Storm

206707	6.8	警告	FFmpeg	-	FFmpeg の libavcodec/faxcompr.c の decode_uncompressed 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8218	2015-11-18 11:54	2015-11-6	Show	GitHub Exploit DB Packet Storm

206708	7.5	危険	FFmpeg	-	FFmpeg の libavcodec/hevc_ps.c の ff_hevc_parse_sps 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8217	2015-11-18 11:54	2015-11-5	Show	GitHub Exploit DB Packet Storm

206709	7.5	危険	FFmpeg	-	FFmpeg の libavcodec/mjpegdec.c の ljpeg_decode_yuv_scan 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8216	2015-11-18 11:54	2015-11-5	Show	GitHub Exploit DB Packet Storm

206710	7.5	危険	Piwik	-	Piwik の plugins/Referrers/Controller.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性	CWE-Other その他	CVE-2015-7816	2015-11-18 11:39	2015-10-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
821	4.7	MEDIUM Network	lfprojects	mcp_registry	The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audienc…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-44428	2026-05-16 02:23	2026-05-15	Show	GitHub Exploit DB Packet Storm

822	9.1	CRITICAL Network	opnsense	opnsense	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileg…	CWE-78 OS Command	CVE-2026-44194	2026-05-16 02:19	2026-05-14	Show	GitHub Exploit DB Packet Storm

823	6.5	MEDIUM Network	shellhub	shellhub	ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated u…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44423	2026-05-16 02:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

824	7.5	HIGH Network	zitadel	zitadel	ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to pro…	CWE-90 LDAP Injection	CVE-2026-44671	2026-05-16 02:15	2026-05-15	Show	GitHub Exploit DB Packet Storm

825	6.5	MEDIUM Network	frappe	erpnext	ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyo…	CWE-862 Missing Authorization	CVE-2026-44448	2026-05-16 01:20	2026-05-14	Show	GitHub Exploit DB Packet Storm

826	9.1	CRITICAL Network	opnsense	opnsense	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell scrip…	CWE-88 Argument Injection	CVE-2026-45158	2026-05-16 01:19	2026-05-14	Show	GitHub Exploit DB Packet Storm

827	4.3	MEDIUM Network	-	-	Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se…	CWE-693 Protection Mechanism Failure	CVE-2026-8563	2026-05-16 01:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

828	6.5	MEDIUM Network	opnsense	opnsense	OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication fa…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2026-44195	2026-05-16 01:06	2026-05-14	Show	GitHub Exploit DB Packet Storm

829	9.8	CRITICAL Network	apache	tomcat	Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0…	CWE-20 Improper Input Validation	CVE-2026-41293	2026-05-16 00:57	2026-05-13	Show	GitHub Exploit DB Packet Storm

830	9.8	CRITICAL Network	apache	tomcat	DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, fr…	CWE-592 DEPRECATED: Authentication Bypass Issues	CVE-2026-43512	2026-05-16 00:54	2026-05-13	Show	GitHub Exploit DB Packet Storm