Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238641 7.8 危険 nongnu - Mail Notification における重要な情報を取得される脆弱性 - CVE-2007-3209 2012-09-25 16:47 2007-06-9 Show GitHub Exploit DB Packet Storm
238642 7.1 危険 Novell - Novell NetWare の NFS マウントデーモンにおけるバッファオーバーフローの脆弱性 - CVE-2007-3207 2012-09-25 16:47 2007-06-13 Show GitHub Exploit DB Packet Storm
238643 5 警告 The PHP Group
hardened-php project		 - PHP などの製品で使用される parse_str 関数における任意の変数を上書きされる脆弱性 - CVE-2007-3205 2012-09-25 16:47 2007-06-13 Show GitHub Exploit DB Packet Storm
238644 7.5 危険 jffnms - JFFNMS の auth.php における SQL インジェクションの脆弱性 - CVE-2007-3204 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
238645 4.9 警告 Novell - NetWare 用の NMAS における管理ユーザ名などを取得される脆弱性 - CVE-2007-3200 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
238646 4.3 警告 maran - Maran Blog の comments.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3198 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
238647 7.5 危険 vBulletin Solutions, Inc. - vBSupport の vBSupport.php における SQL インジェクションの脆弱性 - CVE-2007-3197 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
238648 7.5 危険 vBulletin Solutions, Inc. - vSupport Integrated Ticket System の vBSupport.php における SQL インジェクションの脆弱性 - CVE-2007-3196 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
238649 9.4 危険 jffnms - JFFNMS の admin/setup.php における設定を変更される脆弱性 - CVE-2007-3192 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
238650 9.4 危険 jffnms - JFFNMS における設定情報を取得される脆弱性 - CVE-2007-3191 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2161 9.0 CRITICAL
Network 		- - Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a security bypass vulnerability exists in the expression execution mechanisms of Thymeleaf… CWE-917
CWE-1336
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-41901 2026-05-14 01:10 2026-05-13 Show GitHub Exploit DB Packet Storm
2162 6.5 MEDIUM
Network 		open5gs open5gs A flaw has been found in Open5GS up to 2.7.7. The impacted element is the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. This manipulation cause… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-8249 2026-05-14 01:10 2026-05-11 Show GitHub Exploit DB Packet Storm
2163 8.8 HIGH
Network 		wavlink wl-nu516u1_firmware A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8228 2026-05-14 01:10 2026-05-10 Show GitHub Exploit DB Packet Storm
2164 8.8 HIGH
Network 		wavlink wl-nu516u1_firmware A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be init… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8227 2026-05-14 01:10 2026-05-10 Show GitHub Exploit DB Packet Storm
2165 7.5 HIGH
Network 		open5gs open5gs A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function pcf_sess_sbi_discover_and_send of the component sm-policies Endpoint. Performing a manipulation result… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-8223 2026-05-14 01:10 2026-05-10 Show GitHub Exploit DB Packet Storm
2166 8.8 HIGH
Network 		wavlink wl-nu516u1_firmware A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8192 2026-05-14 01:10 2026-05-10 Show GitHub Exploit DB Packet Storm
2167 8.8 HIGH
Network 		wavlink wl-nu516u1_firmware A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os … CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8191 2026-05-14 01:10 2026-05-10 Show GitHub Exploit DB Packet Storm
2168 8.8 HIGH
Network 		wavlink wl-nu516u1_firmware A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwa… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8190 2026-05-14 01:10 2026-05-10 Show GitHub Exploit DB Packet Storm
2169 8.8 HIGH
Network 		wavlink wl-nu516u1_firmware A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Au… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8189 2026-05-14 01:09 2026-05-10 Show GitHub Exploit DB Packet Storm
2170 8.8 HIGH
Network 		wavlink wl-nu516u1_firmware A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_channel/wl_Pass/Encryp… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-8188 2026-05-14 01:09 2026-05-10 Show GitHub Exploit DB Packet Storm