Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
192921 6.5 警告
Adjacent 		シスコシステムズ - Cisco ASR シリーズのデバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2017-6603 2017-05-12 15:47 2017-04-5 Show GitHub Exploit DB Packet Storm
192922 6.5 警告
Network 		シスコシステムズ - Cisco Prime Infrastructure および Evolved Programmable Network Manager における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3884 2017-05-12 15:44 2017-04-5 Show GitHub Exploit DB Packet Storm
192923 6.7 警告
Local 		シスコシステムズ - Cisco Mobility Express 2800 および 3800 シリーズ Wireless LAN Controller における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9197 2017-05-12 15:44 2016-11-6 Show GitHub Exploit DB Packet Storm
192924 6.7 警告
Local 		シスコシステムズ - 複数の Cisco Aironet プラットフォームにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9196 2017-05-12 15:44 2016-11-6 Show GitHub Exploit DB Packet Storm
192925 5.3 警告
Network 		シスコシステムズ - Cisco Wireless LAN Controller のソフトウェアの RADIUS Change of Authorization におけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2016-9195 2017-05-12 15:44 2016-11-6 Show GitHub Exploit DB Packet Storm
192926 6.1 警告
Network 		シスコシステムズ - Cisco Integrated Management Controller ソフトウェアにおけるリダイレクトされる脆弱性 CWE-601
オープンリダイレクト 		CVE-2017-6604 2017-05-12 15:20 2017-04-5 Show GitHub Exploit DB Packet Storm
192927 6.4 警告
Physics 		シスコシステムズ - Cisco IOS XE ソフトウェアのスタートアップスクリプトにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2017-6606 2017-05-12 15:10 2017-04-5 Show GitHub Exploit DB Packet Storm
192928 5.9 警告
Network 		Apache Software Foundation - Apache Ignite における任意のファイルを読まれる脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2016-6805 2017-05-12 15:00 2016-08-12 Show GitHub Exploit DB Packet Storm
192929 9.8 緊急
Network 		News system - News モジュールの NewsController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-7581 2017-05-12 14:49 2017-01-20 Show GitHub Exploit DB Packet Storm
192930 8.8 重要
Network 		PivotX - PivotX における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2017-7570 2017-05-12 14:24 2017-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 7.5 HIGH
Network 		vmware spring_boot Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used for secrets as they are numeric values wi… CWE-330
 Use of Insufficiently Random Values 		CVE-2026-40975 2026-04-30 22:57 2026-04-28 Show GitHub Exploit DB Packet Storm
762 9.1 CRITICAL
Network 		vmware spring_boot In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web applica… CWE-862
 Missing Authorization 		CVE-2026-40976 2026-04-30 22:54 2026-04-28 Show GitHub Exploit DB Packet Storm
763 6.7 MEDIUM
Local 		vmware spring_boot When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the application is starte… CWE-59
Link Following 		CVE-2026-40977 2026-04-30 22:37 2026-04-28 Show GitHub Exploit DB Packet Storm
764 8.8 HIGH
Network 		vmware spring_grpc When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the … CWE-653
 Improper Isolation or Compartmentalization 		CVE-2026-40968 2026-04-30 22:32 2026-04-29 Show GitHub Exploit DB Packet Storm
765 8.8 HIGH
Network 		dlink dir-825m_firmware A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads … CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7288 2026-04-30 22:27 2026-04-29 Show GitHub Exploit DB Packet Storm
766 5.3 MEDIUM
Network 		vmware spring_grpc The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the a… CWE-209
Information Exposure Through an Error Message 		CVE-2026-40969 2026-04-30 22:24 2026-04-29 Show GitHub Exploit DB Packet Storm
767 8.8 HIGH
Network 		dlink dir-825m_firmware A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer o… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7289 2026-04-30 22:19 2026-04-29 Show GitHub Exploit DB Packet Storm
768 5.3 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowing unauthenticated attackers to consume resources. Remote attackers can trigger … CWE-408
 Incorrect Behavior Order: Early Amplification 		CVE-2026-41374 2026-04-30 22:19 2026-04-29 Show GitHub Exploit DB Packet Storm
769 9.4 CRITICAL
Network 		dlink di-8100_firmware A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffe… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7248 2026-04-30 22:18 2026-04-28 Show GitHub Exploit DB Packet Storm
770 4.3 MEDIUM
Network 		- - VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cros… CWE-352
 Origin Validation Error 		CVE-2018-25310 2026-04-30 22:16 2026-04-30 Show GitHub Exploit DB Packet Storm