Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192881 9.8 緊急
Network
Sierra Wireless - Sierra Wireless GX 440 デバイスの ALEOS ファームウェアにおける証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-5066 2017-05-15 13:59 2016-06-9 Show GitHub Exploit DB Packet Storm
192882 9.8 緊急
Network
Sierra Wireless - Sierra Wireless GX 440 デバイスの ALEOS ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2016-5065 2017-05-15 13:59 2016-06-9 Show GitHub Exploit DB Packet Storm
192883 7.5 重要
Network
Linux - Linux Kernel の crypto/ahash.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2017-7618 2017-05-15 13:33 2017-04-10 Show GitHub Exploit DB Packet Storm
192884 5.5 警告
Local
Linux - Linux Kernel の mm/mempolicy.c の set_mempolicy および mbind compat システムコールにおける重要な情報を取得される脆弱性 CWE-388
エラー処理
CVE-2017-7616 2017-05-15 13:33 2017-04-8 Show GitHub Exploit DB Packet Storm
192885 7.5 重要
Network
D-Link Systems, Inc. - D-Link DWR-116 デバイスのファームウェアの Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-6190 2017-05-15 11:42 2017-04-7 Show GitHub Exploit DB Packet Storm
192886 7.8 重要
Local
ソフトバンク株式会社 - PrimeDrive デスクトップアプリケーションのインストーラにおける任意の DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2017-2108 2017-05-15 11:18 2017-03-1 Show GitHub Exploit DB Packet Storm
192887 5.3 警告
Local
Fabrice Bellard - QEMU におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8666 2017-05-12 18:47 2015-11-19 Show GitHub Exploit DB Packet Storm
192888 5.6 警告
Local
Fabrice Bellard - QEMU の megasas_ctrl_get_info 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8613 2017-05-12 18:47 2015-11-20 Show GitHub Exploit DB Packet Storm
192889 5.6 警告
Local
Fabrice Bellard - QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-8568 2017-05-12 18:47 2015-12-8 Show GitHub Exploit DB Packet Storm
192890 5.3 警告
Network
Fabrice Bellard - QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2015-8504 2017-05-12 18:47 2015-12-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
651 4.4 MEDIUM
Local
- - Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 1.0.0 to before version 4.14.4, a heap-based out-of-bounds WRITE occurs in GetAlertData, res… Update CWE-124
CWE-191
Buffer Underflow
 Integer Underflow (Wrap or Wraparound)
CVE-2026-26204 2026-05-1 00:11 2026-04-30 Show GitHub Exploit DB Packet Storm
652 6.5 MEDIUM
Network
- - Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, Wazuh's server API brute-force protection for POST /security… New CWE-307
CWE-362
CWE-367
mproper Restriction of Excessive Authentication Attempts
Race Condition
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-26206 2026-05-1 00:11 2026-04-30 Show GitHub Exploit DB Packet Storm
653 6.5 MEDIUM
Network
- - Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.8.0 to before version 4.14.4, a stack-based buffer overflow exists in print_hex_string() i… New CWE-121
CWE-400
Stack-based Buffer Overflow
 Uncontrolled Resource Consumption
CVE-2026-28221 2026-05-1 00:11 2026-04-30 Show GitHub Exploit DB Packet Storm
654 9.0 CRITICAL
Network
- - Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path traversal vulnerability in Wazuh's cluster synchroniz… New CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-30893 2026-05-1 00:11 2026-04-30 Show GitHub Exploit DB Packet Storm
655 9.8 CRITICAL
Network
- - Tenda W308R v2 V5.07.48 contains a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient session validation. Attackers can send… New CWE-290
 Authentication Bypass by Spoofing
CVE-2018-25316 2026-05-1 00:11 2026-04-30 Show GitHub Exploit DB Packet Storm
656 9.8 CRITICAL
Network
- - Tenda W3002R/A302/W309R wireless routers version V5.07.64_en contain a cookie session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient se… New CWE-290
 Authentication Bypass by Spoofing
CVE-2018-25317 2026-05-1 00:11 2026-04-30 Show GitHub Exploit DB Packet Storm
657 9.8 CRITICAL
Network
- - Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers ca… New CWE-290
 Authentication Bypass by Spoofing
CVE-2018-25318 2026-05-1 00:11 2026-04-30 Show GitHub Exploit DB Packet Storm
658 7.4 HIGH
Network
- - Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects … New CWE-125
Out-of-bounds Read
CVE-2026-42799 2026-05-1 00:09 2026-04-30 Show GitHub Exploit DB Packet Storm
659 7.4 HIGH
Network
- - NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/s… New CWE-476
 NULL Pointer Dereference
CVE-2026-42800 2026-05-1 00:09 2026-04-30 Show GitHub Exploit DB Packet Storm
660 6.5 MEDIUM
Network
- - Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc. PDKS allows Excavation.… New CWE-200
CWE-359
Information Exposure
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-7382 2026-05-1 00:09 2026-04-30 Show GitHub Exploit DB Packet Storm