Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2891 7.8 重要
Local
Imagination Technologies Limited GPU DDK Imagination Technologies LimitedのGPU DDKにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2025-10865 2026-02-2 19:27 2026-01-13 Show GitHub Exploit DB Packet Storm
2892 9.1 緊急
Network
Zoho Corporation ManageEngine ADSelfService Plus Zoho CorporationのManageEngine ADSelfService Plusにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2025-11250 2026-02-2 19:27 2026-01-13 Show GitHub Exploit DB Packet Storm
2893 7.5 重要
Network
OpenVPN Technologies OpenVPN OpenVPN TechnologiesのOpenVPNにおける通信チャネルの送信元の不適切な検証に関する脆弱性 CWE-940
通信チャネルの送信元の不適切な検証
CVE-2025-13086 2026-02-2 19:27 2025-12-3 Show GitHub Exploit DB Packet Storm
2894 7.5 重要
Network
Docker docker desktop DockerのDocker Desktopにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2025-13743 2026-02-2 19:27 2025-12-9 Show GitHub Exploit DB Packet Storm
2895 5.4 警告
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-13744 2026-02-2 19:27 2026-01-6 Show GitHub Exploit DB Packet Storm
2896 5.5 警告
Local
OpenVPN Technologies OpenVPN OpenVPN TechnologiesのOpenVPNにおける複数の脆弱性 CWE-770
CWE-775
CWE-841
CVE-2025-13751 2026-02-2 19:27 2025-12-3 Show GitHub Exploit DB Packet Storm
2897 4.9 警告
Network
IBM IBM Aspera Console IBMのIBM Aspera Consoleにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2025-13925 2026-02-2 19:27 2026-01-20 Show GitHub Exploit DB Packet Storm
2898 7.5 重要
Network
TP-LINK Technologies TL-WA850RE ファームウェア TP-LINK TechnologiesのTL-WA850RE ファームウェアにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2025-14738 2026-02-2 19:27 2025-12-18 Show GitHub Exploit DB Packet Storm
2899 6.1 警告
Network
Philip Okugbe Simple-PHP-Blog Philip OkugbeのSimple-PHP-Blogにおける複数の脆弱性 CWE-79
CWE-79
CWE-94
CVE-2025-15223 2026-02-2 19:27 2025-12-31 Show GitHub Exploit DB Packet Storm
2900 9.8 緊急
Network
HzManyun Education and Training System HzManyunのEducation and Training Systemにおける複数の脆弱性 CWE-74
CWE-77
CWE-77
CVE-2025-1946 2026-02-2 19:27 2025-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
481 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary s… New CWE-78
OS Command 
CVE-2026-41924 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
482 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to exec… New CWE-78
OS Command 
CVE-2026-41925 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
483 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation.… New CWE-78
OS Command 
CVE-2026-41926 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
484 - - - WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to o… New CWE-121
Stack-based Buffer Overflow
CVE-2026-41927 2026-05-6 04:47 2026-05-5 Show GitHub Exploit DB Packet Storm
485 3.7 LOW
Network
- - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. New CWE-158
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43859 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
486 3.7 LOW
Network
- - mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. New CWE-193
 Off-by-one Error
CVE-2026-43860 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
487 3.7 LOW
Network
- - mutt before 2.3.2 does not check for '\0' in url_pct_decode. New CWE-158
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43861 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
488 3.7 LOW
Network
- - In mutt before 2.3.2, the imap_auth_gss security level is mishandled. New CWE-843
Type Confusion
CVE-2026-43862 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
489 3.7 LOW
Network
- - mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. New CWE-253
 Incorrect Check of Function Return Value
CVE-2026-43863 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm
490 2.5 LOW
Local
- - mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. New CWE-476
 NULL Pointer Dereference
CVE-2026-43864 2026-05-6 04:44 2026-05-4 Show GitHub Exploit DB Packet Storm