Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207271 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2015-2470 2015-08-19 12:24 2015-08-11 Show GitHub Exploit DB Packet Storm
207272 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-2468 2015-08-19 12:24 2015-08-11 Show GitHub Exploit DB Packet Storm
207273 9.3 危険 マイクロソフト - Microsoft .NET Framework の RyuJIT コンパイラにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-2481 2015-08-19 11:54 2015-08-11 Show GitHub Exploit DB Packet Storm
207274 9.3 危険 マイクロソフト - Microsoft .NET Framework の RyuJIT コンパイラにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-2480 2015-08-19 11:54 2015-08-11 Show GitHub Exploit DB Packet Storm
207275 9.3 危険 マイクロソフト - Microsoft .NET Framework の RyuJIT コンパイラにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-2479 2015-08-19 11:54 2015-08-11 Show GitHub Exploit DB Packet Storm
207276 2.6 注意 マイクロソフト - 複数の Microsoft Windows 製品の WebDAV クライアントにおける暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題 		CVE-2015-2476 2015-08-19 11:53 2015-08-11 Show GitHub Exploit DB Packet Storm
207277 4.3 警告 マイクロソフト - Microsoft Windows Server 2008 および BizTalk Server の UDDI サービスコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-2475 2015-08-19 11:52 2015-08-11 Show GitHub Exploit DB Packet Storm
207278 4.3 警告 マイクロソフト - 複数の Microsoft Windows 製品のリモート デスクトップ プロトコルにおけるクライアントになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2015-2472 2015-08-19 11:51 2015-08-11 Show GitHub Exploit DB Packet Storm
207279 9 危険 マイクロソフト - Microsoft Windows Vista および Windows Server 2008 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-2474 2015-08-19 11:48 2015-08-11 Show GitHub Exploit DB Packet Storm
207280 9.3 危険 マイクロソフト - Microsoft Windows 7 および Windows Server 2008 R2 のリモート デスクトップ プロトコルのクライアントにおける権限昇格の脆弱性 CWE-Other
その他 		CVE-2015-2473 2015-08-18 16:00 2015-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ima: verify the previous kernel's IMA buffer lies in addressable RAM Patch series "Address page fault in ima_restore_measurement_… New NVD-CWE-noinfo
CVE-2026-43129 2026-05-9 02:46 2026-05-6 Show GitHub Exploit DB Packet Storm
62 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac ("iommu/vt-d: Don't issue AT… New NVD-CWE-noinfo
CVE-2026-43130 2026-05-9 02:44 2026-05-6 Show GitHub Exploit DB Packet Storm
63 9.1 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() If overlay is used on top of btrfs, dentry->d_s… New NVD-CWE-noinfo
CVE-2026-43117 2026-05-9 02:43 2026-05-6 Show GitHub Exploit DB Packet Storm
64 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix null pointer dereference issue If SMU is disabled, during RAS initialization, there will be null pointer derefere… New CWE-476
 NULL Pointer Dereference 		CVE-2026-43131 2026-05-9 02:42 2026-05-6 Show GitHub Exploit DB Packet Storm
65 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero size after log replay When logging that an inode exists, as part of logging a new name o… New NVD-CWE-noinfo
CVE-2026-43118 2026-05-9 02:30 2026-05-6 Show GitHub Exploit DB Packet Storm
66 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr… New NVD-CWE-noinfo
CVE-2026-43132 2026-05-9 02:26 2026-05-6 Show GitHub Exploit DB Packet Storm
67 7.9 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload o… New NVD-CWE-noinfo
CVE-2026-43133 2026-05-9 02:25 2026-05-6 Show GitHub Exploit DB Packet Storm
68 4.8 MEDIUM
Network 		linuxcontainers incus Incus is a system container and virtual machine manager. In versions before 7.0.0, broken TLS validation logic in the OVN database connection logic can allow connections to an attacker's OVN database… New CWE-295
Improper Certificate Validation  		CVE-2026-40243 2026-05-9 02:23 2026-05-7 Show GitHub Exploit DB Packet Storm
69 8.2 HIGH
Network 		quarkus quarkus Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsistency between the sec… New CWE-863
 Incorrect Authorization 		CVE-2026-39852 2026-05-9 02:18 2026-05-6 Show GitHub Exploit DB Packet Storm
70 - - - Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P… New CWE-79
Cross-site Scripting 		CVE-2026-42794 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm