Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203451 7.8 重要
Local
Huawei - Huawei P8 および Mate S スマートフォンのソフトウェアの ovisp ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8681 2016-04-12 16:27 2015-12-25 Show GitHub Exploit DB Packet Storm
203452 7.8 重要
Local
Huawei - Huawei P8 および Mate S スマートフォンのソフトウェアのグラフィックスドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8680 2016-04-12 16:27 2015-12-25 Show GitHub Exploit DB Packet Storm
203453 5.5 警告
Local
Huawei - Huawei P8 および Mate S スマートフォンのソフトウェアの ION および Maxim_smartpa_dev ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8679 2016-04-12 16:27 2015-12-25 Show GitHub Exploit DB Packet Storm
203454 7.8 重要
Local
Huawei - Huawei P8 および Mate S スマートフォンのソフトウェアの HIFI ドライバにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8319 2016-04-12 16:27 2015-11-22 Show GitHub Exploit DB Packet Storm
203455 7.8 重要
Local
Huawei - Huawei P8 および Mate S スマートフォンのソフトウェアの HIFI ドライバにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8318 2016-04-12 16:27 2015-11-22 Show GitHub Exploit DB Packet Storm
203456 7.8 重要
Local
Huawei - Huawei P8 および Mate S スマートフォンのソフトウェアのグラフィックスドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8307 2016-04-12 16:27 2015-11-20 Show GitHub Exploit DB Packet Storm
203457 7.3 重要
Network
Ruby on Rails project - Ruby on Rails の Action Pack における任意の Ruby コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-2098 2016-04-12 15:42 2016-02-29 Show GitHub Exploit DB Packet Storm
203458 5.3 警告
Network
Ruby on Rails project - Ruby on Rails の Action View におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-2097 2016-04-12 15:42 2016-02-29 Show GitHub Exploit DB Packet Storm
203459 7 重要
Local
Exim Development - Exim における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1531 2016-04-12 15:11 2016-03-8 Show GitHub Exploit DB Packet Storm
203460 8.8 重要
Network
Zimbra - Zimbra Collaboration Server のメールインターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-6541 2016-04-12 14:22 2015-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
141 - - - Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function New - CVE-2026-36906 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
142 - - - Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1.45.2. New CWE-79
Cross-site Scripting
CVE-2026-34089 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
143 8.6 HIGH
Network
- - In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded an… New CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-33362 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
144 7.5 HIGH
Network
- - In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversi… New CWE-326
Inadequate Encryption Strength
CVE-2026-33361 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
145 7.5 HIGH
Network
- - In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforce… New CWE-862
 Missing Authorization
CVE-2026-33359 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
146 7.5 HIGH
Network
- - In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated call path to openapi-euce.mearic… New CWE-862
 Missing Authorization
CVE-2026-33357 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
147 7.7 HIGH
Network
- - In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. … New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-33356 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
148 - - - The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script. The script registers the Python … New - CVE-2026-31254 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
149 - - - The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) in its checkpoint loading mechani… New - CVE-2026-31253 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
150 - - - CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component. The framework uses torch.load(… New - CVE-2026-31252 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm