Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
212781 5.4 警告 sears - Android 用 Sears アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5873 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212782 5.4 警告 SafeNet, Inc - Android 用 SafeNetMobile Pass アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5872 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212783 5.4 警告 Piwik - Android 用 Piwik Mobile 2 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5871 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212784 5.4 警告 kmart - Android 用 Kmart アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5870 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212785 5.4 警告 cnn - Android 用 CNNMoney Portfolio アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5869 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212786 5.4 警告 シスコシステムズ - Android 用 Cisco Technical Support アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5868 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212787 5.4 警告 sparkpay - Android 用 Capital One Spark Pay アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5867 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212788 5.4 警告 dmv.ca.gov - Android 用 CA DMV アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5866 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212789 5.4 警告 ask - Android 用 Ask.com アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5865 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
212790 5.4 警告 getswish - Android 用 Swish payments アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5864 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
771 7.5 HIGH
Network 		u-speed n300_firmware A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management in… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-36958 2026-05-5 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
772 7.5 HIGH
Network 		u-speed n300_firmware U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication… Update CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-36959 2026-05-5 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
773 5.4 MEDIUM
Network 		redhat build_of_keycloak When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled. Five endpoints under the versioned path `/account/v1alpha1` remain fully func… Update CWE-425
NVD-CWE-noinfo
 Direct Request ('Forced Browsing') 		CVE-2026-7500 2026-05-5 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
774 7.5 HIGH
Network 		dbitnet dbit_n300_t1_pro_firmware Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent … Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-36957 2026-05-5 11:59 2026-05-1 Show GitHub Exploit DB Packet Storm
775 5.5 MEDIUM
Local 		redhat multicluster_engine_for_kubernetes A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-sco… Update CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2026-7163 2026-05-5 11:57 2026-04-30 Show GitHub Exploit DB Packet Storm
776 7.8 HIGH
Local 		qt qtdeclarative Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution… Update CWE-20
CWE-94
 Improper Input Validation 
Code Injection 		CVE-2025-14576 2026-05-5 11:57 2026-04-30 Show GitHub Exploit DB Packet Storm
777 5.9 MEDIUM
Network 		perldancer dancer\ Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generated from summing the character codepoints of the absolute pathname with the proce… Update CWE-338
CWE-340
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
 Generation of Predictable Numbers or Identifiers 		CVE-2026-5080 2026-05-5 11:54 2026-04-30 Show GitHub Exploit DB Packet Storm
778 5.3 MEDIUM
Network 		asrmicro asr1901_firmware
asr1903_firmware 		NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/s… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-42800 2026-05-5 11:54 2026-04-30 Show GitHub Exploit DB Packet Storm
779 9.8 CRITICAL
Network 		asrmicro asr1803_firmware Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects … Update CWE-125
Out-of-bounds Read 		CVE-2026-42799 2026-05-5 11:53 2026-04-30 Show GitHub Exploit DB Packet Storm
780 9.8 CRITICAL
Network 		oppo coloros_assistant ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal. Update CWE-23
CWE-22
 Relative Path Traversal
Path Traversal 		CVE-2026-22070 2026-05-5 11:53 2026-04-30 Show GitHub Exploit DB Packet Storm