脆弱性一覧

CVE / GHSA / KEV / OSV を統合監視。タグ・カテゴリで絞り込み可能。

KEV

カテゴリ

すべて 🌐 Webアプリケーション 🧭 ブラウザ 🖥️ OS 📱 モバイル 🛰️ ネットワーク機器 ☁️ クラウド/コンテナ 📝 CMS/サイトビルダー 🗄️ データベース/ストレージ 🔐 認証/ID 🔑 暗号 🛠️ DevOps/CI/CD 🤖 AI/ML 🔌 IoT/組込 🧩 ハードウェア/ファーム 🏢 業務SaaS 🧰 開発者ツール ☠️ 悪性パッケージ 📦 その他

タググループ

すべて 💬 言語 22 🧱 Webフレームワーク 29 📱 モバイル基盤 6 🤖 AI/MLフレームワーク 11 🖥️ Webサーバー 9 🗄️ DB 13 📝 CMS 9 ☁️ クラウド 11 📦 コンテナ技術 12 🖥️ OS 15 ⚔️ 攻撃タイプ 25 🧬 CWE 185 🏢 ベンダー 581 📦 製品 666 🌳 パッケージ系 24 🛠️ DevOpsツール 17 📡 プロトコル 15

人気タグ (件数順 Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 CWE-20: 入力検証の不備125 CWE-78: OSコマンドインジェクション120 Linux Kernel106 CWE-787: 境界外書き込み105 Apple99 CWE-416: 解放後使用 (Use-After-Free)99 CWE-22: パストラバーサル96 Rootdebian1393 CWE-119: メモリの境界外操作90 Cisco89 サービス拒否 (DoS)85 CWE-94: コードインジェクション84 Multiple Products79 Adobe78 Google77 CWE-502: 安全でないデシリアライゼーション70 CWE-79: クロスサイトスクリプティング (XSS)66 CWE-89: SQLインジェクション54 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

フィルタ中: カテゴリ: database クリア

ID	タイトル	重要度	タグ	検知
CVE-2026-18554	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain... IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain...	High	CWE-22: パストラバーサルパストラバーサル Ibm Database +1	2週間前
CVE-2026-17179	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a... IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a...	High	サービス拒否 (DoS) CWE-78: OSコマンドインジェクション Ibm コマンドインジェクション +1	2週間前
CVE-2026-17177	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service... IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service...	High	サービス拒否 (DoS) Cwe 674 Ibm Db2 +1	2週間前
CVE-2026-17175	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain... IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain...	High	Cwe 287 Ibm リモートファイルインクルージョン Db2 Mirror For I	2週間前
CVE-2026-17081	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due... IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due...	High	CWE-22: パストラバーサル Ibm Database パストラバーサル +1	2週間前
CVE-2026-16879	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass... IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass...	High	Cwe 285 Ibm Db2 認証バイパス +1	2週間前
CVE-2026-16708	IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive... IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive...	High	Cwe 15 Ibm Db2 Mirror For I	2週間前
CVE-2026-72642	The native inference process that Elasticsearch uses to evaluate uploaded machine learning models... The native inference process that Elasticsearch uses to evaluate uploaded machine learning models...	High	Cwe 823 Elasticsearch Ai Ml リモートコード実行 (RCE)	2週間前
CVE-2026-18692	An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated... An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated...	High	CWE-416: 解放後使用 (Use-After-Free) MongoDB 解放後使用	2週間前
CVE-2026-18691	An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable... An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...	High	Cwe 757 MongoDB 認証情報漏洩認証バイパス	2週間前
CVE-2026-17346	The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON /... The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON /...	High	CWE-89: SQLインジェクション PostgreSQL Sql Injection Pgadmin +1	4週間前
CVE-2026-18022	Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to... Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to...	High	Cwe 190 CWE-787: 境界外書き込み Pgvector 整数オーバーフロー +2	1ヶ月前
CVE-2026-66373	Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,... Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE,...	High	リモートコード実行 (RCE) Cwe 415 Redis	1ヶ月前
CVE-2024-58368	SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST... SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST...	High	Cwe 248 Surrealdb HTTP サービス拒否 (DoS)	1ヶ月前
CVE-2024-58366	SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception:... SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception:...	High	Cwe 134 Surrealdb リモートコード実行 (RCE) Delskayn +1	1ヶ月前
CVE-2024-58362	SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the... SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the...	High	Cwe 75 リモートコード実行 (RCE) Surrealdb Rpc Api	1ヶ月前
CVE-2023-54366	SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT,... SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT,...	High	Cwe 276 Surrealdb 権限昇格	1ヶ月前
CVE-2025-2902	Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. ... Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. ...	High	Cwe 862 Improper Authorization	2ヶ月前
CVE-2026-47835	CVE-2026-47835 の脆弱性 (CVE-2026-47835) CVE-2026-47835 に脆弱性 (CVE-2026-47835) が存在。機密情報が外部に流出する可能性があります。	High	Cwe 943 Spring Elasticsearch Opensearch +4	2ヶ月前
CVE-2026-11933	Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion	High	JavaScript サービス拒否 (DoS) CWE-787: 境界外書き込み MongoDB +2	2ヶ月前
CVE-2026-11824	SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate	High	Cwe 122 SQLite バッファオーバーフロー	2ヶ月前
CVE-2026-11822	SQLite before 3.53.2 Memory Corruption in FTS5 Extension SQLite before 3.53.2 Memory Corruption in FTS5 Extension	High	Cwe 122 SQLite バッファオーバーフロー	2ヶ月前
CVE-2026-11400	AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance	High	AWS Amazon Cloud Cwe 426 +4	2ヶ月前
CVE-2026-11401	AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance	High	Cwe 426 AWS Go 権限昇格	2ヶ月前
CVE-2021-2351	Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau... Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Su...	High	C Cwe 327 Cwe 384 Oracle +113	5年前

脆弱性一覧

🍪 Cookie について