Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 12:07 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192721 8.8 重要
Network
Dahua Technology Co., Ltd - Dahua IP Camera デバイスにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-7253 2017-04-28 15:47 2017-03-31 Show GitHub Exploit DB Packet Storm
192722 5.9 警告
Network
トレンドマイクロ - Trend Micro Enterprise Mobile Security Android Application における証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2016-9319 2017-04-28 15:36 2016-11-7 Show GitHub Exploit DB Packet Storm
192723 9.8 緊急
Network
Multi-Router Looking Glass project - MRLG の fastping.c における任意のメモリを書き込まれる脆弱性 CWE-119
バッファエラー
CVE-2014-3931 2017-04-28 15:34 2014-09-27 Show GitHub Exploit DB Packet Storm
192724 7.5 重要
Adjacent
Hak5 - Hak5 WiFi Pineapple におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2015-4624 2017-04-28 15:24 2015-08-12 Show GitHub Exploit DB Packet Storm
192725 7.5 重要
Network
ImageMagick - ImageMagick の vision.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-9804 2017-04-28 14:35 2014-12-23 Show GitHub Exploit DB Packet Storm
192726 7.8 重要
Local
Linux - Linux Kernel の net/packet/af_packet.c の packet_set_ring 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2017-7308 2017-04-28 14:33 2017-03-29 Show GitHub Exploit DB Packet Storm
192727 7.8 重要
Local
Linux - Linux Kernel の drivers/gpu/drm/vmwgfx/vmwgfx_surface.c の vmw_surface_define_ioctl 関数における整数オーバーフローの脆弱性 CWE-190
CWE-787
CVE-2017-7294 2017-04-28 14:33 2017-03-28 Show GitHub Exploit DB Packet Storm
192728 7.1 重要
Local
Linux - Linux Kernel の TCP stack における重要な情報を取得される脆弱性 CWE-125
境界外読み取り
CVE-2017-7277 2017-04-28 14:33 2017-03-21 Show GitHub Exploit DB Packet Storm
192729 6.6 警告
Physics
Linux - Linux Kernel の drivers/hid/hid-cypress.c の cp_report_fixup 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2017-7273 2017-04-28 14:33 2017-01-6 Show GitHub Exploit DB Packet Storm
192730 6.1 警告
Network
Nagios Enterprises, LLC - Nagios におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6209 2017-04-28 14:01 2016-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 6.5 MEDIUM
Network
technitium dnsserver Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server delegation. Update CWE-684
 Incorrect Provision of Specified Functionality
CVE-2026-42255 2026-04-30 03:54 2026-04-26 Show GitHub Exploit DB Packet Storm
2 8.8 HIGH
Network
tenda f456_firmware A vulnerability was identified in Tenda F456 1.0.0.5. The impacted element is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument menufacturer/Go leads … Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7019 2026-04-30 03:44 2026-04-26 Show GitHub Exploit DB Packet Storm
3 8.8 HIGH
Network
tenda f456_firmware A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulation of the argument menufacturer/Go can … Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7029 2026-04-30 03:36 2026-04-26 Show GitHub Exploit DB Packet Storm
4 8.8 HIGH
Network
tenda f456_firmware A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer over… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7030 2026-04-30 03:36 2026-04-26 Show GitHub Exploit DB Packet Storm
5 8.8 HIGH
Network
tenda f456_firmware A vulnerability was detected in Tenda F456 1.0.0.5. This impacts the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page results in buffer overflow. It… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7031 2026-04-30 03:29 2026-04-26 Show GitHub Exploit DB Packet Storm
6 8.8 HIGH
Network
tenda f456_firmware A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument page causes buffer overflow. The attack ca… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7032 2026-04-30 03:26 2026-04-26 Show GitHub Exploit DB Packet Storm
7 5.9 MEDIUM
Network
vmware spring_ai In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conv… New CWE-284
Improper Access Control
CVE-2026-40966 2026-04-30 03:18 2026-04-28 Show GitHub Exploit DB Packet Storm
8 8.8 HIGH
Network
vmware spring_ai SQL injection vulnerability in Spring AI's `CosmosDBVectorStore` allows attackers to execute arbitrary SQL queries via crafted document IDs. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0… New CWE-89
SQL Injection
CVE-2026-40978 2026-04-30 03:16 2026-04-28 Show GitHub Exploit DB Packet Storm
9 6.1 MEDIUM
Local
vmware spring_ai In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1.4 (fixed in 1.1.5) New CWE-377
 Insecure Temporary File
CVE-2026-40979 2026-04-30 03:16 2026-04-28 Show GitHub Exploit DB Packet Storm
10 5.3 MEDIUM
Network
- - A vulnerability was identified in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/wecom.py of the component WeChat Work Platform Ad… New CWE-22
Path Traversal
CVE-2026-7396 2026-04-30 03:16 2026-04-30 Show GitHub Exploit DB Packet Storm