Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201031 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_rar.c の copy_from_lzss_window 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8934 2016-09-23 16:33 2015-06-20 Show GitHub Exploit DB Packet Storm
201032 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_tar.c の archive_read_format_tar_skip 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2015-8933 2016-09-23 16:33 2015-08-9 Show GitHub Exploit DB Packet Storm
201033 5.5 警告
Local
SUSE
libarchive
Debian
Canonical
- libarchive の archive_read_support_filter_compress.c の compress_bidder_init 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8932 2016-09-23 16:33 2015-08-9 Show GitHub Exploit DB Packet Storm
201034 7.8 重要
Local
SUSE
libarchive
Debian
Canonical
- libarchive の archive_read_support_format_mtree.c の get_time_t_max および get_time_t_min 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2015-8931 2016-09-23 16:33 2015-05-17 Show GitHub Exploit DB Packet Storm
201035 7.5 重要
Network
SUSE
libarchive
Canonical
- libarchive の bsdtar におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8930 2016-09-23 16:33 2015-04-12 Show GitHub Exploit DB Packet Storm
201036 5.5 警告
Local
libarchive
SUSE
- libarchive の archive_read_extract2.c の __archive_read_get_extract 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-8929 2016-09-23 16:33 2015-04-12 Show GitHub Exploit DB Packet Storm
201037 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_mtree.c の process_add_entry 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8928 2016-09-23 16:33 2015-05-22 Show GitHub Exploit DB Packet Storm
201038 5.5 警告
Local
libarchive - libarchive の archive_read_support_format_zip.c の trad_enc_decrypt_update 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8927 2016-09-23 16:33 2015-04-12 Show GitHub Exploit DB Packet Storm
201039 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_rar.c の archive_read_format_rar_read_data 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8926 2016-09-23 16:33 2015-04-12 Show GitHub Exploit DB Packet Storm
201040 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_mtree.c の readline 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8925 2016-09-23 16:33 2015-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 6.8 MEDIUM
Physics
- - Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnected (hidden/debug mode). CWE-276
Incorrect Default Permissions 
CVE-2026-36742 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1082 7.2 HIGH
Network
- - U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration interface does not properly sanitize user-supplied input. A… CWE-77
Command Injection
CVE-2026-36741 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1083 7.5 HIGH
Network
- - striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack. CWE-121
Stack-based Buffer Overflow
CVE-2025-28344 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1084 7.5 HIGH
Network
- - striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons. CWE-121
Stack-based Buffer Overflow
CVE-2025-28343 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1085 6.2 MEDIUM
Local
- - Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_SmartAudio::loop, AP_SmartAudio… CWE-121
Stack-based Buffer Overflow
CVE-2024-51395 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1086 6.2 MEDIUM
Local
- - Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRo… CWE-120
CWE-121
Classic Buffer Overflow
Stack-based Buffer Overflow
CVE-2024-48519 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1087 9.8 CRITICAL
Network
artica pandora_fms Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800 CWE-89
SQL Injection
CVE-2026-34187 2026-05-14 22:05 2026-05-13 Show GitHub Exploit DB Packet Storm
1088 9.6 CRITICAL
Network
langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). Th… CWE-22
Path Traversal
CVE-2026-42048 2026-05-14 21:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1089 7.5 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorizatio… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-44575 2026-05-14 21:38 2026-05-14 Show GitHub Exploit DB Packet Storm
1090 8.1 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to au… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-44574 2026-05-14 21:37 2026-05-14 Show GitHub Exploit DB Packet Storm