Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191431 7.8 重要
Local 		Google - Linux kernel を使用している CAF リリースの Android の QTEE アプリケーションにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2015-9025 2017-07-6 14:28 2017-06-5 Show GitHub Exploit DB Packet Storm
191432 7.8 重要
Local 		Google - Linux kernel を使用している CAF リリースの Android の PlayReady API におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2015-9023 2017-07-6 14:28 2017-06-5 Show GitHub Exploit DB Packet Storm
191433 7.8 重要
Local 		Google - Linux kernel を使用している CAF リリースの Android におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2014-9961 2017-07-6 14:28 2017-06-5 Show GitHub Exploit DB Packet Storm
191434 7.8 重要
Local 		Google - Linux kernel を使用している CAF リリースの Android の PlayReady API におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2014-9960 2017-07-6 14:28 2017-06-5 Show GitHub Exploit DB Packet Storm
191435 7.5 重要
Network 		Wireshark - Wireshark の DAAP ディセクタの epan/dissectors/packet-daap.c の dissect_daap_one_tag 関数におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2017-9617 2017-07-6 13:59 2017-06-13 Show GitHub Exploit DB Packet Storm
191436 7.5 重要
Network 		レッドハット - Red Hat CloudForms Management Engine における暗号に関する脆弱性 CWE-310
暗号の問題 		CVE-2016-4457 2017-07-6 13:53 2016-05-31 Show GitHub Exploit DB Packet Storm
191437 5.9 警告
Network 		Huawei - Huawei AR1220 ルータのファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-19
データ処理 		CVE-2015-2255 2017-07-6 13:45 2015-03-18 Show GitHub Exploit DB Packet Storm
191438 9.8 緊急
Network 		Seagate Technology LLC - Seagate Business NAS デバイスのファームウェアにおける任意のコードを実行される脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2014-8687 2017-07-6 12:24 2014-11-9 Show GitHub Exploit DB Packet Storm
191439 9.8 緊急
Network 		game-music-emu project
openSUSE project
SUSE
Fedora Project		 - game-music-emu における数値処理に関する脆弱性 CWE-189
数値処理の問題 		CVE-2016-9961 2017-07-6 11:07 2016-12-14 Show GitHub Exploit DB Packet Storm
191440 8.8 重要
Network 		マイクロソフト - Microsoft Skype におけるスタックバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-9948 2017-07-6 11:03 2017-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 6.3 MEDIUM
Network 		- - A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwa… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8190 2026-05-10 03:16 2026-05-10 Show GitHub Exploit DB Packet Storm
2 6.3 MEDIUM
Network 		- - A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Au… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8189 2026-05-10 02:16 2026-05-10 Show GitHub Exploit DB Packet Storm
3 6.3 MEDIUM
Network 		- - A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_channel/wl_Pass/Encryp… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8188 2026-05-10 01:16 2026-05-10 Show GitHub Exploit DB Packet Storm
4 5.3 MEDIUM
Network 		- - The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure in versions up to, and including… New CWE-200
Information Exposure 		CVE-2026-8198 2026-05-9 22:16 2026-05-9 Show GitHub Exploit DB Packet Storm
5 - - - Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled Gra… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42793 2026-05-9 22:16 2026-05-9 Show GitHub Exploit DB Packet Storm
6 5.3 MEDIUM
Network 		- - A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the component NF. Performing a manipulation resul… New CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read 		CVE-2026-8186 2026-05-9 21:16 2026-05-9 Show GitHub Exploit DB Packet Storm
7 5.3 MEDIUM
Network 		- - A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to resource consumption… New CWE-400
CWE-404
 Uncontrolled Resource Consumption
 Improper Resource Shutdown or Release 		CVE-2026-8187 2026-05-9 20:16 2026-05-9 Show GitHub Exploit DB Packet Storm
8 6.3 MEDIUM
Adjacent 		- - A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of the component Administrative Interface. Such manipulation leads to missing authe… New CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-8185 2026-05-9 20:16 2026-05-9 Show GitHub Exploit DB Packet Storm
9 7.2 HIGH
Network 		- - Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can e… New - CVE-2026-3828 2026-05-9 18:16 2026-05-9 Show GitHub Exploit DB Packet Storm
10 5.3 MEDIUM
Adjacent 		- - Some EZVIZ products utilize older versions of cloud feature modules with legacy API interfaces, which pose a data transmission risk. Attackers can exploit this by eavesdropping on network requests to… New - CVE-2026-32683 2026-05-9 18:16 2026-05-9 Show GitHub Exploit DB Packet Storm