Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208681 5 警告 アップル
Apache Software Foundation
オラクル		 - Apache HTTP Server の mod_cgid モジュールおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0231 2015-05-11 18:22 2014-07-14 Show GitHub Exploit DB Packet Storm
208682 4.9 警告 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される JBoss Application Server の SimpleSecurityManager の isCallerInRole 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3472 2015-05-11 18:22 2014-08-6 Show GitHub Exploit DB Packet Storm
208683 10 危険 アップル
日立
サン・マイクロシステムズ		 - Oracle Java SE の Java Runtime Environment (JRE) における Hotspot の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1723 2015-05-11 16:24 2012-06-12 Show GitHub Exploit DB Packet Storm
208684 9.3 危険 マイクロソフト - Microsoft Word およびその他の製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-1761 2015-05-11 16:24 2014-03-24 Show GitHub Exploit DB Packet Storm
208685 10 危険 マイクロソフト - Internet Explorer に解放済みメモリ使用 (use-after-free) の脆弱性 CWE-94
CWE-Other
CVE-2014-1776 2015-05-11 16:24 2014-04-27 Show GitHub Exploit DB Packet Storm
208686 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-4114 2015-05-11 16:24 2014-10-14 Show GitHub Exploit DB Packet Storm
208687 10 危険 アップル
日立
サン・マイクロシステムズ
オラクル		 - Oracle Java SE の Java Runtime Environment における 2D に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2465 2015-05-11 16:21 2013-06-18 Show GitHub Exploit DB Packet Storm
208688 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0188 2015-05-11 16:19 2010-02-16 Show GitHub Exploit DB Packet Storm
208689 9.3 危険 ヒューレット・パッカード
アドビシステムズ
レッドハット
オラクル		 - Adobe Flash Player に脆弱性 CWE-noinfo
情報不足 		CVE-2011-0611 2015-05-11 16:16 2011-04-13 Show GitHub Exploit DB Packet Storm
208690 6.8 警告 アドビシステムズ - Adobe ColdFusion における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-0625 2015-05-11 16:12 2013-01-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 8.8 HIGH
Network 		tenda f456_firmware A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes bu… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7079 2026-04-30 23:37 2026-04-27 Show GitHub Exploit DB Packet Storm
252 8.8 HIGH
Network 		tenda f456_firmware A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. Such manipulation of the ar… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7080 2026-04-30 23:35 2026-04-27 Show GitHub Exploit DB Packet Storm
253 8.8 HIGH
Network 		tenda f456_firmware A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7081 2026-04-30 23:30 2026-04-27 Show GitHub Exploit DB Packet Storm
254 8.8 HIGH
Network 		tenda f456_firmware A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the arg… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7082 2026-04-30 23:28 2026-04-27 Show GitHub Exploit DB Packet Storm
255 8.8 HIGH
Network 		tenda f456_firmware A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. This manipulation of th… Update CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7097 2026-04-30 23:27 2026-04-27 Show GitHub Exploit DB Packet Storm
256 7.5 HIGH
Adjacent 		vmware spring_boot An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. In extreme circumstances this could result in the att… New CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-40972 2026-04-30 23:26 2026-04-28 Show GitHub Exploit DB Packet Storm
257 7.0 HIGH
Local 		vmware spring_boot A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.servlet.session.persistent` is set to `true` and the attack p… New CWE-377
 Insecure Temporary File 		CVE-2026-40973 2026-04-30 23:25 2026-04-28 Show GitHub Exploit DB Packet Storm
258 3.7 LOW
Network 		openclaw openclaw OpenClaw before 2026.4.4 contains a race condition vulnerability in shared-secret authentication that allows concurrent asynchronous requests to bypass the per-key rate-limit budget. Attackers can ex… New CWE-362
Race Condition 		CVE-2026-41913 2026-04-30 23:15 2026-04-29 Show GitHub Exploit DB Packet Storm
259 4.8 MEDIUM
Network 		dlink dgs-3420-28tc_firmware A vulnerability was determined in D-Link DGS-3420 1.50.018. This issue affects some unknown processing of the component System Information Settings Page. This manipulation of the argument System Name… Update CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7026 2026-04-30 23:11 2026-04-26 Show GitHub Exploit DB Packet Storm
260 4.8 MEDIUM
Network 		dlink dsl-2740r_firmware A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to … Update CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7027 2026-04-30 23:10 2026-04-26 Show GitHub Exploit DB Packet Storm