Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
237371 7.5 危険 lucas rodriguez san pedro - Lucas Rodriguez San Pedro YANS の yans.func.php における SQL インジェクションの脆弱性 - CVE-2006-5908 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
237372 7.8 危険 libsoup - libsoup HTTP ライブラリの soup-headers.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5876 2012-09-25 15:36 2007-01-16 Show GitHub Exploit DB Packet Storm
237373 7.5 危険 jean-christophe ramos - Jean-Christophe Ramos SCRIPT BANNIERES における SQL インジェクションの脆弱性 - CVE-2006-5907 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
237374 7.5 危険 mwchat pro - MWChat Pro における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5904 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
237375 5 警告 hawking technology - Hawking Technology の WR254-CA におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5901 2012-09-25 15:36 2006-11-15 Show GitHub Exploit DB Packet Storm
237376 7.5 危険 iwonder designs - iWonder Designs Storystream における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5893 2012-09-25 15:36 2006-11-14 Show GitHub Exploit DB Packet Storm
237377 7.5 危険 マイクロソフト - Microsoft Internet Explorer の DirectAnimation ActiveX コントロールにおける脆弱性 - CVE-2006-5884 2012-09-25 15:36 2006-11-14 Show GitHub Exploit DB Packet Storm
237378 7.5 危険 isystems - Munch Pro の switch.asp の subMenu ページにおける SQL インジェクションの脆弱性 - CVE-2006-5880 2012-09-25 15:36 2006-11-14 Show GitHub Exploit DB Packet Storm
237379 7.8 危険 l2tpns
Debian
- l2tpns の cluster.c の cluster_process_heartbeat 関数におけるバッファオーバーフローの脆弱性 - CVE-2006-5873 2012-09-25 15:36 2006-12-8 Show GitHub Exploit DB Packet Storm
237380 7.5 危険 otterware - inc/session.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5863 2012-09-25 15:36 2006-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary s… New CWE-78
OS Command 
CVE-2026-41924 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
482 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to exec… New CWE-78
OS Command 
CVE-2026-41925 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
483 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation.… New CWE-78
OS Command 
CVE-2026-41926 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
484 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to o… New CWE-121
Stack-based Buffer Overflow
CVE-2026-41927 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
485 3.7 LOW
Network
- - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. New CWE-158
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43859 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
486 3.7 LOW
Network
- - mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. New CWE-193
 Off-by-one Error
CVE-2026-43860 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
487 3.7 LOW
Network
- - mutt before 2.3.2 does not check for '\0' in url_pct_decode. New CWE-158
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43861 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
488 3.7 LOW
Network
- - In mutt before 2.3.2, the imap_auth_gss security level is mishandled. New CWE-843
Type Confusion
CVE-2026-43862 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
489 3.7 LOW
Network
- - mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. New CWE-253
 Incorrect Check of Function Return Value
CVE-2026-43863 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
490 2.5 LOW
Local
- - mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. New CWE-476
 NULL Pointer Dereference
CVE-2026-43864 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm