Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
611 7.2 重要
Network
Shenzhen Tenda Technology Co.,Ltd. AC6 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC6 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8265 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
612 7.2 重要
Network
D-Link Systems, Inc. D-Link DNS-320 ファームウェア D-Link CorporationのD-Link DNS-320 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8271 2026-05-13 10:21 2026-05-11 Show GitHub Exploit DB Packet Storm
613 7.2 重要
Network
D-Link Systems, Inc. D-Link DNS-320 ファームウェア D-Link CorporationのD-Link DNS-320 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8272 2026-05-13 10:20 2026-05-11 Show GitHub Exploit DB Packet Storm
614 7.2 重要
Network
D-Link Systems, Inc. D-Link DNS-320 ファームウェア D-Link CorporationのD-Link DNS-320 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8273 2026-05-13 10:20 2026-05-11 Show GitHub Exploit DB Packet Storm
615 9.8 緊急
Network
エレコム株式会社 WAB-S300IW2-PD
WRC-X3000GST2-B
WRC-X1800GS-B
WRC-X6000QSA-G
WRC-X3000GS2-W
WAB-S733IW2-PD
WAB-S733IW-AC
WAB-S733IW-PD
WRC-XE5400GS-G
WRC-X3000GS2-B
WRC-X1800GSA-B
WRC…
エレコム無線LAN関連製品における複数の脆弱性 CWE-352
CWE-78
CWE-Other
CVE-2026-20704
CVE-2026-22550
CVE-2026-24449
CVE-2026-24465
2026-05-12 15:09 2026-02-3 Show GitHub Exploit DB Packet Storm
616 8.8 重要
Adjacent
エレコム株式会社 WRC-X3000GS2-B ファームウェア
WAB-I1750-PS
WAB-S1775 ファームウェア
WRC-X3000GST2-B
WAB-S733MI
WAB-S1167-PS
WRC-X3000GS2A-B ファームウェア
WAB-M1775-PS ファームウェア
WRC-X3000GS2-W&n…
エレコム製無線LANルーターおよび無線アクセスポイントにおける複数の脆弱性 CWE-119
CWE-79
CWE-Other
CVE-2024-34577
CVE-2024-39300
CVE-2024-42412
CVE-2024-43689
2026-05-12 15:01 2024-08-27 Show GitHub Exploit DB Packet Storm
617 6.8 警告
Adjacent
エレコム株式会社 WRC-2533GST2 ファームウェア
WRC-X3000GST2-B
WRC-X1800GS-B
WRC-X6000QSA-G
WRC-2533GS2V-B
WMC-X1800GST-B
WRC-G01-W
WRC-XE5400GS-G
WRC-X1800GSA-B
WRC-X1800GSH-B
WRC-X6000XST-…
エレコム製無線LANルーターにおける複数の脆弱性 CWE-352
CWE-78
CWE-Other
CVE-2024-34021
CVE-2024-39607
CVE-2024-40883
2026-05-12 14:51 2024-07-30 Show GitHub Exploit DB Packet Storm
618 9.8 緊急
Network
エレコム株式会社 WAB-BE36-M
WRC-X3000GST2-B
WRC-X1800GS-B
WRC-X6000QSA-G
WRC-X3000GS2-W
WRC-XE5400GS-G
WRC-X3000GS2-B
WRC-X1800GSA-B
WRC-BE65QSD-B
WRC-X6000XST-G
WRC-X1800GSH-B
WRC-X6…
エレコム製無線LANルーターおよび無線アクセスポイントにおける複数の脆弱性(2026年5月) CWE-78
CWE-79
CWE-Other
CVE-2026-25107
CVE-2026-35506
CVE-2026-40621
CVE-2026-42062
CVE-2026-42948
CVE-2026-42950
CVE-2026-42961
2026-05-12 14:20 2026-05-12 Show GitHub Exploit DB Packet Storm
619 - - ollama ollama Ollamaにおける境界外の読み取りおよび書き込みの脆弱性 - - 2026-05-12 12:34 2026-05-11 Show GitHub Exploit DB Packet Storm
620 4.9 警告
Network
キヤノン (複数の製品) キヤノン製プロダクションプリンター、オフィス/スモールオフィス向け複合機における機微な情報を取得可能な脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存
CVE-2026-1789 2026-05-12 12:34 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 6.8 MEDIUM
Physics
- - Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnected (hidden/debug mode). CWE-276
Incorrect Default Permissions 
CVE-2026-36742 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1082 7.2 HIGH
Network
- - U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP) configuration interface does not properly sanitize user-supplied input. A… CWE-77
Command Injection
CVE-2026-36741 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1083 7.5 HIGH
Network
- - striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack. CWE-121
Stack-based Buffer Overflow
CVE-2025-28344 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1084 7.5 HIGH
Network
- - striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons. CWE-121
Stack-based Buffer Overflow
CVE-2025-28343 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1085 6.2 MEDIUM
Local
- - Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_SmartAudio::loop, AP_SmartAudio… CWE-121
Stack-based Buffer Overflow
CVE-2024-51395 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1086 6.2 MEDIUM
Local
- - Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRo… CWE-120
CWE-121
Classic Buffer Overflow
Stack-based Buffer Overflow
CVE-2024-48519 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1087 9.8 CRITICAL
Network
artica pandora_fms Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800 CWE-89
SQL Injection
CVE-2026-34187 2026-05-14 22:05 2026-05-13 Show GitHub Exploit DB Packet Storm
1088 9.6 CRITICAL
Network
langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). Th… CWE-22
Path Traversal
CVE-2026-42048 2026-05-14 21:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1089 7.5 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorizatio… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-44575 2026-05-14 21:38 2026-05-14 Show GitHub Exploit DB Packet Storm
1090 8.1 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to au… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-44574 2026-05-14 21:37 2026-05-14 Show GitHub Exploit DB Packet Storm