Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208681 5 警告 レッドハット - Red Hat JBoss Enterprise Application の Platformorg.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-3481 2015-05-11 18:22 2014-06-26 Show GitHub Exploit DB Packet Storm
208682 6.8 警告 アップル
日立
Apache Software Foundation
オラクル		 - Apache HTTP Server の mod_status モジュールおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2014-0226 2015-05-11 18:22 2014-07-14 Show GitHub Exploit DB Packet Storm
208683 5 警告 アップル
Apache Software Foundation
オラクル		 - Apache HTTP Server の mod_cgid モジュールおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0231 2015-05-11 18:22 2014-07-14 Show GitHub Exploit DB Packet Storm
208684 4.9 警告 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される JBoss Application Server の SimpleSecurityManager の isCallerInRole 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3472 2015-05-11 18:22 2014-08-6 Show GitHub Exploit DB Packet Storm
208685 10 危険 アップル
日立
サン・マイクロシステムズ		 - Oracle Java SE の Java Runtime Environment (JRE) における Hotspot の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1723 2015-05-11 16:24 2012-06-12 Show GitHub Exploit DB Packet Storm
208686 9.3 危険 マイクロソフト - Microsoft Word およびその他の製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-1761 2015-05-11 16:24 2014-03-24 Show GitHub Exploit DB Packet Storm
208687 10 危険 マイクロソフト - Internet Explorer に解放済みメモリ使用 (use-after-free) の脆弱性 CWE-94
CWE-Other
CVE-2014-1776 2015-05-11 16:24 2014-04-27 Show GitHub Exploit DB Packet Storm
208688 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-4114 2015-05-11 16:24 2014-10-14 Show GitHub Exploit DB Packet Storm
208689 10 危険 アップル
日立
サン・マイクロシステムズ
オラクル		 - Oracle Java SE の Java Runtime Environment における 2D に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2465 2015-05-11 16:21 2013-06-18 Show GitHub Exploit DB Packet Storm
208690 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0188 2015-05-11 16:19 2010-02-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 7.5 HIGH
Network 		vmware spring_boot Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used for secrets as they are numeric values wi… CWE-330
 Use of Insufficiently Random Values 		CVE-2026-40975 2026-04-30 22:57 2026-04-28 Show GitHub Exploit DB Packet Storm
762 9.1 CRITICAL
Network 		vmware spring_boot In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web applica… CWE-862
 Missing Authorization 		CVE-2026-40976 2026-04-30 22:54 2026-04-28 Show GitHub Exploit DB Packet Storm
763 6.7 MEDIUM
Local 		vmware spring_boot When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the application is starte… CWE-59
Link Following 		CVE-2026-40977 2026-04-30 22:37 2026-04-28 Show GitHub Exploit DB Packet Storm
764 8.8 HIGH
Network 		vmware spring_grpc When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the … CWE-653
 Improper Isolation or Compartmentalization 		CVE-2026-40968 2026-04-30 22:32 2026-04-29 Show GitHub Exploit DB Packet Storm
765 8.8 HIGH
Network 		dlink dir-825m_firmware A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads … CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7288 2026-04-30 22:27 2026-04-29 Show GitHub Exploit DB Packet Storm
766 5.3 MEDIUM
Network 		vmware spring_grpc The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the a… CWE-209
Information Exposure Through an Error Message 		CVE-2026-40969 2026-04-30 22:24 2026-04-29 Show GitHub Exploit DB Packet Storm
767 8.8 HIGH
Network 		dlink dir-825m_firmware A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer o… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7289 2026-04-30 22:19 2026-04-29 Show GitHub Exploit DB Packet Storm
768 5.3 MEDIUM
Network 		openclaw openclaw OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowing unauthenticated attackers to consume resources. Remote attackers can trigger … CWE-408
 Incorrect Behavior Order: Early Amplification 		CVE-2026-41374 2026-04-30 22:19 2026-04-29 Show GitHub Exploit DB Packet Storm
769 9.4 CRITICAL
Network 		dlink di-8100_firmware A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffe… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7248 2026-04-30 22:18 2026-04-28 Show GitHub Exploit DB Packet Storm
770 4.3 MEDIUM
Network 		- - VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cros… CWE-352
 Origin Validation Error 		CVE-2018-25310 2026-04-30 22:16 2026-04-30 Show GitHub Exploit DB Packet Storm