Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207601 5.8 警告 Drupal
Debian
- Drupal の Overlay モジュールにおけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2015-3233 2015-09-4 15:41 2015-06-17 Show GitHub Exploit DB Packet Storm
207602 6.1 警告 シスコシステムズ - 複数の Cisco Nexus デバイス上で稼動する Cisco NX-OS および MDS SAN-OS の ARP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-6277 2015-09-4 15:19 2015-09-1 Show GitHub Exploit DB Packet Storm
207603 5 警告 シスコシステムズ - Cisco ASR 1000 デバイスのソフトウェアの IPv4 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-6274 2015-09-4 15:19 2015-08-31 Show GitHub Exploit DB Packet Storm
207604 6.9 警告 シスコシステムズ - Cisco TelePresence Video Communication Server Expressway のローカルファイルのスクリプトにおける OS コマンド実行のための権限を取得される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2015-4330 2015-09-4 15:19 2015-09-1 Show GitHub Exploit DB Packet Storm
207605 3.5 注意 MedhabiDotCom - WordPress 用 MDC Private Message プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-6805 2015-09-4 12:18 2015-08-19 Show GitHub Exploit DB Packet Storm
207606 9.3 危険 Observa Telecom
Philippine Long Distance Telephone Company (PLDT)
ASUSTeK Computer Inc.
DIGICOM
ZTE
- 複数の DSL ルータ製品がハードコードされたパスワードを使用する問題 - - 2015-09-4 10:48 2015-08-25 Show GitHub Exploit DB Packet Storm
207607 9.3 危険 Linux - Linux Kernel の arch/x86/crypto/aesni-intel_glue.c 内の __driver_rfc4106_decrypt 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-3331 2015-09-3 17:51 2015-03-26 Show GitHub Exploit DB Packet Storm
207608 4 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server : GIS に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-2582 2015-09-3 17:41 2015-07-14 Show GitHub Exploit DB Packet Storm
207609 4 警告 オラクル - Oracle MySQL の MySQL Server における Server : DML に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-2611 2015-09-3 17:41 2015-07-14 Show GitHub Exploit DB Packet Storm
207610 6.5 警告 オラクル - Oracle MySQL の MySQL Server における Server : Partition に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-2617 2015-09-3 17:41 2015-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1261 6.3 MEDIUM
Network
- - A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Au… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8189 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1262 6.3 MEDIUM
Network
- - A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwa… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8190 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1263 6.3 MEDIUM
Network
- - A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os … Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8191 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1264 6.3 MEDIUM
Network
- - A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8192 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1265 6.3 MEDIUM
Network
- - A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be init… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8227 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1266 6.3 MEDIUM
Network
- - A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8228 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1267 4.7 MEDIUM
Network
- - A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipula… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8263 2026-05-12 00:06 2026-05-11 Show GitHub Exploit DB Packet Storm
1268 7.5 HIGH
Network
google android In nr modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. Update NVD-CWE-noinfo
CVE-2025-71256 2026-05-12 00:06 2026-05-6 Show GitHub Exploit DB Packet Storm
1269 8.8 HIGH
Network
- - A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The manipu… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-8260 2026-05-12 00:06 2026-05-11 Show GitHub Exploit DB Packet Storm
1270 4.7 MEDIUM
Network
- - A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the f… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8271 2026-05-12 00:05 2026-05-11 Show GitHub Exploit DB Packet Storm