Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209131 6.9 警告 OpenBSD - OpenBSD 以外のプラットフォーム上で稼動する OpenSSH の sshd の monitor.c 内の mm_answer_pam_free_ctx 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-6564 2015-08-28 10:01 2015-08-11 Show GitHub Exploit DB Packet Storm
209132 7.5 危険 Niels Provos
Debian		 - Libevent の evbuffer API における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2015-6525 2015-08-27 18:12 2015-01-5 Show GitHub Exploit DB Packet Storm
209133 7.5 危険 Niels Provos
Debian		 - Libevent の evbuffer API における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-6272 2015-08-27 18:11 2014-09-9 Show GitHub Exploit DB Packet Storm
209134 5 警告 GNU Project
Debian		 - GnuTLS におけるメモリ二重解放の脆弱性 CWE-Other
その他 		CVE-2015-6251 2015-08-27 17:10 2015-07-20 Show GitHub Exploit DB Packet Storm
209135 3.5 注意 MantisBT Group - MantisBT の Configuration Report ページ内の "set configuration" ボックスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8987 2015-08-27 16:21 2014-12-5 Show GitHub Exploit DB Packet Storm
209136 8.5 危険 レッドハット - Red Hat OpenShift Enterprise における任意のビルド pod の root 権限で任意のシェルコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5222 2015-08-27 16:08 2015-08-20 Show GitHub Exploit DB Packet Storm
209137 4.3 警告 レッドハット - mod_cluster の管理者 Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-0298 2015-08-27 15:54 2015-02-27 Show GitHub Exploit DB Packet Storm
209138 7.8 危険 ARM Ltd. (旧 Offspark) - PolarSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-9744 2015-08-27 15:42 2014-10-22 Show GitHub Exploit DB Packet Storm
209139 7.8 危険 ARM Ltd. (旧 Offspark) - PolarSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8628 2015-08-27 15:42 2014-10-22 Show GitHub Exploit DB Packet Storm
209140 7.5 危険 ヒューレット・パッカード - HP KeyView における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2015-5424 2015-08-27 15:42 2015-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2371 - - - The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the sy… CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-25710 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2372 - - - The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44931 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2373 8.8 HIGH
Adjacent 		- - A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim… CWE-79
Cross-site Scripting 		CVE-2026-23819 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2374 7.2 HIGH
Network 		- - A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environme… CWE-78
OS Command  		CVE-2026-23820 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2375 7.2 HIGH
Network 		- - A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Su… CWE-78
OS Command  		CVE-2026-23821 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2376 5.3 MEDIUM
Network 		- - A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an at… CWE-776
XML Entity Expansion 		CVE-2026-23822 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2377 7.2 HIGH
Network 		- - A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacke… CWE-77
Command Injection 		CVE-2026-23823 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2378 9.1 CRITICAL
Network 		- - Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data… - CVE-2025-11159 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2379 4.3 MEDIUM
Network 		- - A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to ce… CWE-36
 Absolute Path Traversal 		CVE-2026-32175 2026-05-14 00:34 2026-05-13 Show GitHub Exploit DB Packet Storm
2380 7.3 HIGH
Local 		- - Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. CWE-20
CWE-122
 Improper Input Validation 
Heap-based Buffer Overflow 		CVE-2026-32177 2026-05-14 00:34 2026-05-13 Show GitHub Exploit DB Packet Storm