Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191731 5.5 警告
Local 		Conexant Systems, LLC - 複数の HP 製品上で稼動する Conexant Systems MicTray64 における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-8360 2017-06-13 17:41 2017-05-11 Show GitHub Exploit DB Packet Storm
191732 7.8 重要
Local 		Gemalto N.V. - Gemalto SmartDiag Diagnosis Tool におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-6953 2017-06-13 17:37 2017-05-8 Show GitHub Exploit DB Packet Storm
191733 7 重要
Local 		Google - MediaTek ビデオドライバにおける権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0617 2017-06-13 17:37 2017-05-1 Show GitHub Exploit DB Packet Storm
191734 3.8 低
Local 		VMware - Android 用 Airwatch Inbox における暗号に関する脆弱性 CWE-310
暗号の問題 		CVE-2017-4896 2017-06-13 17:32 2017-01-30 Show GitHub Exploit DB Packet Storm
191735 8.8 重要
Local 		VMware - Android 用 Airwatch Agent における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-4895 2017-06-13 17:32 2017-01-30 Show GitHub Exploit DB Packet Storm
191736 7 重要
Local 		Google - MediaTek コマンドキュードライバにおける権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0618 2017-06-13 17:31 2017-05-1 Show GitHub Exploit DB Packet Storm
191737 5.5 警告
Local 		CA Technologies - CA Client Automation の OS Installation Management コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2017-8391 2017-06-13 17:28 2017-05-4 Show GitHub Exploit DB Packet Storm
191738 6.5 警告
Network 		Google - Google Chrome の FFMPEG の libavformat/mov.c におけるメモリ二重解放の脆弱性 CWE-415
二重解放 		CVE-2015-1207 2017-06-13 17:02 2015-01-6 Show GitHub Exploit DB Packet Storm
191739 5.5 警告
Local 		lrzip project - lrzip で使用される LZO の lzo1x_d.ch の lzo1x_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2017-8845 2017-06-13 16:55 2017-03-25 Show GitHub Exploit DB Packet Storm
191740 5.5 警告
Local 		Linux - Linux Kernel の drivers/usb/serial/omninet.c の omninet_open 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2017-8925 2017-06-13 16:34 2017-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
41 5.5 MEDIUM
Local 		qualcomm cologne_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
iqx5121_firmware
iqx7181_firmware
qca0000_firmware
qcm5430_firmware
qcm6490_firm… 		Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. New CWE-126
CWE-125
 Buffer Over-read
Out-of-bounds Read 		CVE-2025-47406 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
42 7.0 HIGH
Local 		qualcomm cq7790_firmware
cq8725s_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
g2_gen_1_firmware
molokai_firmware
net… 		Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level. New CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-47407 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
43 7.8 HIGH
Local 		qualcomm qxm1096_firmware
robotics_rb2_firmware
robotics_rb5_firmware
sa4150p_firmware
sa4155p_firmware
sa6145p_firmware
sa6150p_firmware
sa6155p_firmware
sa7255p_firmware
sa7775p_f… 		Memory Corruption when copying data from a freed source while executing performance counter deselect operation. New CWE-416
 Use After Free 		CVE-2026-24082 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
44 7.8 HIGH
Local 		qualcomm cologne_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
sc8380xp_firmware
snapdragon_ar1_gen_1_firmware
wcd9378c_firmware
wcd9380_firmware
wcd9385_firmware
wcn786… 		Memory corruption while processing IOCTL command when device is in power-save state. New CWE-749
CWE-787
 Exposed Dangerous Method or Function
 Out-of-bounds Write 		CVE-2026-25266 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
45 9.8 CRITICAL
Network 		qualcomm qca7005_firmware Buffer overflow due to incorrect authorization in PLC FW New CWE-863
 Incorrect Authorization 		CVE-2026-25293 2026-05-7 03:01 2026-05-5 Show GitHub Exploit DB Packet Storm
46 9.1 CRITICAL
Network 		apache opennlp XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor … New CWE-611
XXE 		CVE-2026-40682 2026-05-7 03:00 2026-05-5 Show GitHub Exploit DB Packet Storm
47 9.8 CRITICAL
Network 		apache opennlp Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 2.5.9, before 3.0.0-M3 Description:  The ExtensionLoader.instantiateExtension(C… New CWE-470
Unsafe Reflection 		CVE-2026-42027 2026-05-7 03:00 2026-05-5 Show GitHub Exploit DB Packet Storm
48 9.8 CRITICAL
Network 		nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the initial installation window exposed by POST /api/insta… New CWE-284
CWE-306
Improper Access Control
Missing Authentication for Critical Function 		CVE-2026-42222 2026-05-7 02:47 2026-05-5 Show GitHub Exploit DB Packet Storm
49 7.2 HIGH
Network 		dlink di-8100_firmware A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The atta… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-7851 2026-05-7 02:40 2026-05-6 Show GitHub Exploit DB Packet Storm
50 9.8 CRITICAL
Network 		dlink di-8100_firmware A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7853 2026-05-7 02:40 2026-05-6 Show GitHub Exploit DB Packet Storm