Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1311 6.5 警告
Network 		Canonical Juju CanonicalのJujuにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-5412 2026-05-1 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
1312 7.1 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける暗号化処理のナンスおよび鍵ペアの再利用に関する脆弱性 CWE-323
暗号化処理のナンスおよび鍵ペアの再利用 		CVE-2026-5446 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
1313 7.5 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-5447 2026-05-1 10:44 2026-04-9 Show GitHub Exploit DB Packet Storm
1314 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC10 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC10 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5547 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
1315 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC10 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC10 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5548 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
1316 7.5 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC10 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC10 ファームウェアにおける複数の脆弱性 CWE-320
CWE-321
CVE-2026-5549 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
1317 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC10 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC10 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5550 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
1318 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. m3 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のm3 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-5567 2026-05-1 10:44 2026-04-5 Show GitHub Exploit DB Packet Storm
1319 8.8 重要
Network 		Belkin International F9K1122 ファームウェア Belkin InternationalのF9K1122 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5608 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
1320 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. I12 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のI12 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5609 2026-05-1 10:44 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
851 - - - Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26. The backend lacks authorization controls, leaving security entirely to the frontend. By mod… CWE-862
 Missing Authorization 		CVE-2026-8077 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
852 - - - SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality … CWE-862
 Missing Authorization 		CVE-2026-44125 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
853 - - - SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers to execute code vi… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-44126 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
854 - - - SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to… CWE-73
 External Control of File Name or Path 		CVE-2026-44127 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
855 - - - SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's e… CWE-95
Eval Injection 		CVE-2026-44128 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
856 - - - SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remot… CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-44129 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
857 - - - SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system i… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-7864 2026-05-9 00:51 2026-05-8 Show GitHub Exploit DB Packet Storm
858 8.1 HIGH
Network 		- - DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attackers to execute arbitrary commands… CWE-78
OS Command  		CVE-2022-50994 2026-05-9 00:48 2026-05-8 Show GitHub Exploit DB Packet Storm
859 5.3 MEDIUM
Network 		- - Vvveb before 1.0.8.2 contains an information disclosure vulnerability in the cron controller that allows unauthenticated attackers to retrieve the application's secret cron key. Attackers can access … CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-41928 2026-05-9 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm
860 6.1 MEDIUM
Network 		- - Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute arbitrary JavaScript by manipulati… CWE-79
Cross-site Scripting 		CVE-2026-41929 2026-05-9 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm