Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2651 9.1 緊急
Network
PowerDNS dnsdist PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-33598 2026-04-27 10:50 2026-04-22 Show GitHub Exploit DB Packet Storm
2652 8.1 重要
Adjacent
PowerDNS dnsdist PowerDNSのdnsdistにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-33599 2026-04-27 10:50 2026-04-22 Show GitHub Exploit DB Packet Storm
2653 8.2 重要
Network
PowerDNS dnsdist PowerDNSのdnsdistにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-33602 2026-04-27 10:50 2026-04-22 Show GitHub Exploit DB Packet Storm
2654 10 緊急
Network
Flatpak Flatpak FlatpakにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー
CVE-2026-34078 2026-04-27 10:50 2026-04-7 Show GitHub Exploit DB Packet Storm
2655 9.1 緊急
Network
- オラクルのEnterprise Manager Base Platformにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-34279 2026-04-27 10:50 2026-04-21 Show GitHub Exploit DB Packet Storm
2656 4.7 警告
Network
オラクル Oracle Applications Framework オラクルのOracle Applications Frameworkにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34298 2026-04-27 10:50 2026-04-21 Show GitHub Exploit DB Packet Storm
2657 6.5 警告
Network
オラクル PeopleSoft Enterprise FIN Maintenance Management オラクルのPeopleSoft Enterprise FIN Maintenance Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34299 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2658 6.5 警告
Network
オラクル PeopleSoft Enterprise FIN Maintenance Management オラクルのPeopleSoft Enterprise FIN Maintenance Managementにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34301 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2659 5.5 警告
Network
オラクル Oracle Workflow オラクルのOracle Workflowにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34302 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2660 7.5 重要
Network
オラクル Oracle WebLogic Server オラクルのOracle WebLogic Serverにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-34305 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1261 6.3 MEDIUM
Network
- - A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Au… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8189 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1262 6.3 MEDIUM
Network
- - A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwa… Update CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8190 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1263 6.3 MEDIUM
Network
- - A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os … New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8191 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1264 6.3 MEDIUM
Network
- - A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8192 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1265 6.3 MEDIUM
Network
- - A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be init… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8227 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1266 6.3 MEDIUM
Network
- - A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8228 2026-05-12 00:07 2026-05-10 Show GitHub Exploit DB Packet Storm
1267 4.7 MEDIUM
Network
- - A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipula… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8263 2026-05-12 00:06 2026-05-11 Show GitHub Exploit DB Packet Storm
1268 7.5 HIGH
Network
google android In nr modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. Update NVD-CWE-noinfo
CVE-2025-71256 2026-05-12 00:06 2026-05-6 Show GitHub Exploit DB Packet Storm
1269 8.8 HIGH
Network
- - A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The manipu… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-8260 2026-05-12 00:06 2026-05-11 Show GitHub Exploit DB Packet Storm
1270 4.7 MEDIUM
Network
- - A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the f… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8271 2026-05-12 00:05 2026-05-11 Show GitHub Exploit DB Packet Storm