Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208451 5.5 警告 （複数のベンダ） - Voice over LTE (VoLTE) の実装に複数の脆弱性 CWE-287
CWE-Other
- 2015-10-21 14:04 2015-10-16 Show GitHub Exploit DB Packet Storm
208452 5 警告 Persistent Systems Ltd - Persistent Accelerite Radia Client Automation のデフォルト設定におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-7863 2015-10-21 11:36 2015-02-19 Show GitHub Exploit DB Packet Storm
208453 5 警告 Persistent Systems Ltd - Persistent Accelerite Radia Client Automation におけるアカウントのロールの割り当てを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-7862 2015-10-21 11:36 2015-02-19 Show GitHub Exploit DB Packet Storm
208454 4.3 警告 AVAST Software s.r.o. - アバストにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-5662 2015-10-20 17:57 2015-10-16 Show GitHub Exploit DB Packet Storm
208455 2.6 注意 SAND STUDIO - Android アプリ AirDroid における暗黙的 Intent の扱いに関する脆弱性 CWE-DesignError
CVE-2015-5661 2015-10-20 17:57 2015-10-16 Show GitHub Exploit DB Packet Storm
208456 4.9 警告 Linux - Linux Kernel の drivers/net/slip/slhc.c の slhc_init 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-7799 2015-10-20 17:56 2015-09-29 Show GitHub Exploit DB Packet Storm
208457 6.9 警告 Linux - Linux Kernel の IPC オブジェクトの実装における権限を取得される脆弱性 CWE-362
競合状態 		CVE-2015-7613 2015-10-20 17:56 2015-09-30 Show GitHub Exploit DB Packet Storm
208458 7.8 危険 Linux - Linux Kernel の net/rds/connection.c の __rds_conn_create 関数におけサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-6937 2015-10-20 17:56 2015-09-9 Show GitHub Exploit DB Packet Storm
208459 2.1 注意 Linux - Linux Kernel の drivers/vhost/vhost.c の vhost_dev_ioctl 関数 におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-6252 2015-10-20 17:56 2015-08-10 Show GitHub Exploit DB Packet Storm
208460 4.6 警告 Linux - Linux Kernel の drivers/scsi/sg.c の sg_start_req 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2015-5707 2015-10-20 17:56 2015-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2681 9.8 CRITICAL
Network 		apache tomcat DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, fr… CWE-592
 DEPRECATED: Authentication Bypass Issues 		CVE-2026-43512 2026-05-16 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
2682 7.5 HIGH
Network 		espressif arduino-esp32 arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer Digest authentication implementation in arduino-esp… CWE-287
NVD-CWE-noinfo
Improper Authentication 		CVE-2026-42855 2026-05-16 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
2683 7.5 HIGH
Network 		apache tomcat Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 … CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-43513 2026-05-16 00:53 2026-05-13 Show GitHub Exploit DB Packet Storm
2684 9.1 CRITICAL
Network 		apache tomcat Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21,… CWE-285
Improper Authorization 		CVE-2026-43515 2026-05-16 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2685 8.8 HIGH
Network 		arubanetworks arubaos
sd-wan 		Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo… CWE-77
Command Injection 		CVE-2026-44866 2026-05-16 00:49 2026-05-13 Show GitHub Exploit DB Packet Storm
2686 5.9 MEDIUM
Network 		vercel next.js Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nextjs-data header on a normal request to a path han… CWE-349
 Acceptance of Extraneous Untrusted Data With Trusted Data 		CVE-2026-44572 2026-05-16 00:46 2026-05-14 Show GitHub Exploit DB Packet Storm
2687 7.8 HIGH
Local 		microsoft windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2022
windows_server_2022_23h2
windows_server_2025 		External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CWE-73
 External Control of File Name or Path 		CVE-2026-41088 2026-05-16 00:45 2026-05-13 Show GitHub Exploit DB Packet Storm
2688 9.8 CRITICAL
Network 		microsoft windows_server_2012
windows_server_2016
windows_server_2019
windows_server_2022
windows_server_2022_23h2
windows_server_2025 		Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. CWE-121
Stack-based Buffer Overflow 		CVE-2026-41089 2026-05-16 00:42 2026-05-13 Show GitHub Exploit DB Packet Storm
2689 7.8 HIGH
Local 		microsoft windows_server_2012
windows_server_2016
windows_server_2019
windows_server_2022
windows_server_2022_23h2
windows_server_2025 		Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free 		CVE-2026-41095 2026-05-16 00:40 2026-05-13 Show GitHub Exploit DB Packet Storm
2690 9.8 CRITICAL
Network 		microsoft windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2022_23h2
windows_server_2025 		Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. CWE-122
Heap-based Buffer Overflow 		CVE-2026-41096 2026-05-16 00:38 2026-05-13 Show GitHub Exploit DB Packet Storm