Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
851 9.8 緊急
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-5264 2026-05-1 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
852 4.3 警告
Network 		LibRaw LibRaw LibRawにおける複数の脆弱性 CWE-119
CWE-787
CVE-2026-5318 2026-05-1 10:45 2026-04-2 Show GitHub Exploit DB Packet Storm
853 5.3 警告
Network 		LibRaw LibRaw LibRawにおける複数の脆弱性 CWE-119
CWE-125
CVE-2026-5342 2026-05-1 10:45 2026-04-2 Show GitHub Exploit DB Packet Storm
854 3.7 低
Network 		free5gc free5gc free5GCにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-5360 2026-05-1 10:44 2026-04-2 Show GitHub Exploit DB Packet Storm
855 6.5 警告
Network 		Canonical Juju CanonicalのJujuにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-5412 2026-05-1 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
856 7.1 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける暗号化処理のナンスおよび鍵ペアの再利用に関する脆弱性 CWE-323
暗号化処理のナンスおよび鍵ペアの再利用 		CVE-2026-5446 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
857 7.5 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-5447 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
858 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC10 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC10 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5547 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
859 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC10 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC10 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5548 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
860 7.5 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC10 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC10 ファームウェアにおける複数の脆弱性 CWE-320
CWE-321
CVE-2026-5549 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312971 6.5 MEDIUM
Network 		siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware
ruggedcom_rm1224_lte\(4g\)_nam_firmware
scalance_m804pb_firmware
scalance_m826-2_shdsl-router_firmware
scalance_m874-2_firmware
scalance_m874-3_f… 		A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.1), SCALANCE M804PB… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-41978 2024-08-24 03:34 2024-08-13 Show GitHub Exploit DB Packet Storm
312972 - - - autMan v2.9.6 allows attackers to bypass authentication via a crafted web request. - CVE-2024-43032 2024-08-24 03:15 2024-08-24 Show GitHub Exploit DB Packet Storm
312973 - - - autMan v2.9.6 was discovered to contain an access control issue. - CVE-2024-43031 2024-08-24 03:15 2024-08-24 Show GitHub Exploit DB Packet Storm
312974 7.5 HIGH
Network 		cisco spa_301_firmware
spa_303_firmware
spa_501g_firmware
spa_502g_firmware
spa_504g_firmware
spa_508g_firmware
spa_509g_firmware
spa_512g_firmware
spa_514g_firmware
spa_525g_fir… 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote … NVD-CWE-noinfo
CVE-2024-20451 2024-08-24 03:14 2024-08-8 Show GitHub Exploit DB Packet Storm
312975 9.8 CRITICAL
Network 		cisco spa_301_firmware
spa_303_firmware
spa_501g_firmware
spa_502g_firmware
spa_504g_firmware
spa_508g_firmware
spa_509g_firmware
spa_512g_firmware
spa_514g_firmware
spa_525g_fir… 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote … CWE-120
Classic Buffer Overflow 		CVE-2024-20450 2024-08-24 03:14 2024-08-8 Show GitHub Exploit DB Packet Storm
312976 9.8 CRITICAL
Network 		cisco spa_301_firmware
spa_303_firmware
spa_501g_firmware
spa_502g_firmware
spa_504g_firmware
spa_508g_firmware
spa_509g_firmware
spa_512g_firmware
spa_514g_firmware
spa_525g_fir… 		Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote … CWE-120
Classic Buffer Overflow 		CVE-2024-20454 2024-08-24 03:13 2024-08-8 Show GitHub Exploit DB Packet Storm
312977 6.5 MEDIUM
Network 		enphase iq_gateway_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in Enphase IQ Gateway (formerly known as Envoy) allows File Manipulation. The endp… CWE-22
Path Traversal 		CVE-2024-21877 2024-08-24 03:06 2024-08-12 Show GitHub Exploit DB Packet Storm
312978 9.1 CRITICAL
Network 		enphase iq_gateway_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to a… CWE-22
Path Traversal 		CVE-2024-21876 2024-08-24 03:05 2024-08-12 Show GitHub Exploit DB Packet Storm
312979 9.8 CRITICAL
Network 		enphase iq_gateway_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is pr… CWE-78
OS Command  		CVE-2024-21878 2024-08-24 02:52 2024-08-12 Show GitHub Exploit DB Packet Storm
312980 8.8 HIGH
Network 		enphase iq_gateway_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability through an url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Envoy) … CWE-78
OS Command  		CVE-2024-21879 2024-08-24 02:49 2024-08-12 Show GitHub Exploit DB Packet Storm