Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251621 7.5 危険 CONTIMEX - CONTIMEX Impulsio CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1294 2012-02-27 15:20 2011-02-23 Show GitHub Exploit DB Packet Storm
251622 4.3 警告 BoonEx - Boonex Dolphin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0873 2012-02-27 15:20 2011-02-23 Show GitHub Exploit DB Packet Storm
251623 5 警告 John Koleszar - VP8 Codec SDK (libvpx) におけるサービス運用妨害 (アプリケーションクラッシュ)の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0823 2012-02-27 15:19 2012-02-23 Show GitHub Exploit DB Packet Storm
251624 5 警告 SAP - SAP NetWeaver における MessagingSystem Performance Data についての重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-1292 2012-02-27 13:49 2012-02-23 Show GitHub Exploit DB Packet Storm
251625 5 警告 SAP - SAP NetWeaver における Adapter Monitor についての重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-1291 2012-02-27 13:48 2012-02-23 Show GitHub Exploit DB Packet Storm
251626 4.3 警告 SAP - SAP NetWeaver の b2b/auction/container.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1290 2012-02-27 13:47 2012-02-23 Show GitHub Exploit DB Packet Storm
251627 4 警告 SAP - SAP NetWeaver におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1289 2012-02-27 13:46 2012-02-23 Show GitHub Exploit DB Packet Storm
251628 10 危険 UTC Fire & Security - UTC Fire & Security Master Clock の管理者パスワードがハードコードされている問題 CWE-255
証明書・パスワード管理
CVE-2012-1288 2012-02-24 15:59 2012-02-21 Show GitHub Exploit DB Packet Storm
251629 4.3 警告 IBM - IBM WebSphere Lombardi Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0707 2012-02-24 15:27 2011-11-21 Show GitHub Exploit DB Packet Storm
251630 5 警告 シマンテック - Symantec pcAnywhere 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0291 2012-02-23 15:27 2012-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4951 7.5 HIGH
Network
- - An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. CWE-400
 Uncontrolled Resource Consumption
CVE-2026-37459 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
4952 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the wireless.cgi binary that allow unauthenticated remote attackers to execute arbitrary shell… CWE-78
OS Command 
CVE-2026-41922 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
4953 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to execute arbitrary shel… CWE-78
OS Command 
CVE-2026-41923 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
4954 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary s… CWE-78
OS Command 
CVE-2026-41924 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
4955 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to exec… CWE-78
OS Command 
CVE-2026-41925 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
4956 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation.… CWE-78
OS Command 
CVE-2026-41926 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
4957 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to o… CWE-121
Stack-based Buffer Overflow
CVE-2026-41927 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
4958 3.7 LOW
Network
- - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. CWE-158
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43859 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
4959 3.7 LOW
Network
- - mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. CWE-193
 Off-by-one Error
CVE-2026-43860 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
4960 3.7 LOW
Network
- - mutt before 2.3.2 does not check for '\0' in url_pct_decode. CWE-158
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43861 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm