Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254751 4.3 警告 アップル
サイバートラスト株式会社
WebDAV
レッドハット		 - neon におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-2473 2010-11-25 15:11 2009-08-18 Show GitHub Exploit DB Packet Storm
254752 10 危険 アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
FreeType Project
レッドハット		 - FreeType における入力処理に関する整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0946 2010-11-25 15:11 2009-04-17 Show GitHub Exploit DB Packet Storm
254753 4.3 警告 アップル
アドビシステムズ
ターボリナックス
レッドハット		 - Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4546 2010-11-25 15:10 2008-10-14 Show GitHub Exploit DB Packet Storm
254754 4.3 警告 Google - Google Chrome におけるクライアントユーザに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0644 2010-11-24 15:04 2010-02-10 Show GitHub Exploit DB Packet Storm
254755 4.3 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2649 2010-11-24 15:04 2010-07-2 Show GitHub Exploit DB Packet Storm
254756 10 危険 Google - Google Chrome における脆弱性 CWE-DesignError
CVE-2010-2110 2010-11-24 15:04 2010-05-25 Show GitHub Exploit DB Packet Storm
254757 4.3 警告 Google - Google Chrome の browser/login/login_prompt.cc における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-0556 2010-11-24 15:03 2010-02-10 Show GitHub Exploit DB Packet Storm
254758 7.5 危険 Google - Google Chrome の HTTP ヘッダ処理における脆弱性 CWE-DesignError
CVE-2010-1231 2010-11-24 15:03 2010-03-17 Show GitHub Exploit DB Packet Storm
254759 10 危険 Google - Google Chrome における脆弱性 CWE-200
情報漏えい 		CVE-2010-1230 2010-11-24 15:03 2010-03-17 Show GitHub Exploit DB Packet Storm
254760 10 危険 Google - Google Chrome 内にあるサンドボックスのインフラストラクチャーにおける脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1229 2010-11-24 15:03 2010-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3411 5.5 MEDIUM
Local 		qualcomm cologne_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
iqx5121_firmware
iqx7181_firmware
qca0000_firmware
qcm5430_firmware
qcm6490_firm… 		Information Disclosure while processing IOCTL handler callbacks without verifying buffer size. CWE-126
CWE-125
 Buffer Over-read
Out-of-bounds Read 		CVE-2025-47406 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
3412 7.0 HIGH
Local 		qualcomm cq7790_firmware
cq8725s_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
g2_gen_1_firmware
molokai_firmware
net… 		Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-47407 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
3413 7.8 HIGH
Local 		qualcomm qxm1096_firmware
robotics_rb2_firmware
robotics_rb5_firmware
sa4150p_firmware
sa4155p_firmware
sa6145p_firmware
sa6150p_firmware
sa6155p_firmware
sa7255p_firmware
sa7775p_f… 		Memory Corruption when copying data from a freed source while executing performance counter deselect operation. CWE-416
 Use After Free 		CVE-2026-24082 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
3414 7.8 HIGH
Local 		qualcomm cologne_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
sc8380xp_firmware
snapdragon_ar1_gen_1_firmware
wcd9378c_firmware
wcd9380_firmware
wcd9385_firmware
wcn786… 		Memory corruption while processing IOCTL command when device is in power-save state. CWE-749
CWE-787
 Exposed Dangerous Method or Function
 Out-of-bounds Write 		CVE-2026-25266 2026-05-7 03:02 2026-05-5 Show GitHub Exploit DB Packet Storm
3415 9.8 CRITICAL
Network 		qualcomm qca7005_firmware Buffer overflow due to incorrect authorization in PLC FW CWE-863
 Incorrect Authorization 		CVE-2026-25293 2026-05-7 03:01 2026-05-5 Show GitHub Exploit DB Packet Storm
3416 9.1 CRITICAL
Network 		apache opennlp XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor … CWE-611
XXE 		CVE-2026-40682 2026-05-7 03:00 2026-05-5 Show GitHub Exploit DB Packet Storm
3417 9.8 CRITICAL
Network 		apache opennlp Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 2.5.9, before 3.0.0-M3 Description:  The ExtensionLoader.instantiateExtension(C… CWE-470
Unsafe Reflection 		CVE-2026-42027 2026-05-7 03:00 2026-05-5 Show GitHub Exploit DB Packet Storm
3418 9.8 CRITICAL
Network 		nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. In version 2.3.5, an unauthenticated bootstrap takeover exists in nginx-ui during the initial installation window exposed by POST /api/insta… CWE-284
CWE-306
Improper Access Control
Missing Authentication for Critical Function 		CVE-2026-42222 2026-05-7 02:47 2026-05-5 Show GitHub Exploit DB Packet Storm
3419 7.2 HIGH
Network 		dlink di-8100_firmware A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The atta… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-7851 2026-05-7 02:40 2026-05-6 Show GitHub Exploit DB Packet Storm
3420 9.8 CRITICAL
Network 		dlink di-8100_firmware A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7853 2026-05-7 02:40 2026-05-6 Show GitHub Exploit DB Packet Storm