Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1381 7 重要
Local 		flos-freeware (Florian Balmer) Notepad2 flos-freeware (Florian Balmer)のNotepad2における複数の脆弱性 CWE-426
CWE-427
CVE-2026-4546 2026-05-1 10:38 2026-03-22 Show GitHub Exploit DB Packet Storm
1382 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. 4G03 Pro Firmware Shenzhen Tenda Technology Co.,Ltd.の4G03 Pro Firmwareにおける複数の脆弱性 CWE-266
CWE-284
CVE-2026-5526 2026-05-1 10:38 2026-04-4 Show GitHub Exploit DB Packet Storm
1383 5.3 警告
Network 		Shenzhen Tenda Technology Co.,Ltd. 4G03 Pro Firmware Shenzhen Tenda Technology Co.,Ltd.の4G03 Pro Firmwareにおける複数の脆弱性 CWE-320
CWE-321
CVE-2026-5527 2026-05-1 10:38 2026-04-5 Show GitHub Exploit DB Packet Storm
1384 8 重要
Adjacent 		Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5683 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
1385 8 重要
Adjacent 		Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5684 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
1386 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5685 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
1387 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5686 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
1388 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5687 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
1389 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7019 2026-05-1 10:38 2026-04-26 Show GitHub Exploit DB Packet Storm
1390 4.8 警告
Network 		D-Link Systems, Inc. DGS-3420-28TC Firmware D-Link CorporationのDGS-3420-28TC Firmwareにおける複数の脆弱性 CWE-79
CWE-94
CVE-2026-7026 2026-05-1 10:37 2026-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1011 5.3 MEDIUM
Network 		- - Sensitive server_token exposed via GET parameter in V2Board thru 1.7.4. In app/Http/Controllers/Server/UniProxyController.php, the server authentication token is accepted via GET parameter transmissi… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2026-37504 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1012 4.9 MEDIUM
Network 		- - SQL Injection via ORDER BY clause in V2Board thru 1.7.4. In app/Http/Controllers/Admin/UserController.php, the sort parameter from user input is passed directly to User::orderBy($sort, $sortType) wit… CWE-89
SQL Injection 		CVE-2026-37505 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1013 8.4 HIGH
Local 		- - Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The sync-invoke TCP server (Server.php:87) receives data from a TCP socket, passes it directly to Opis\Closure\unserialize(),… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-37552 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1014 6.5 MEDIUM
Network 		- - SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHelper.php. CWE-89
SQL Injection 		CVE-2026-42475 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1015 5.5 MEDIUM
Local 		- - A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted … CWE-125
Out-of-bounds Read 		CVE-2026-42480 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1016 7.1 HIGH
Adjacent 		- - openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit payload length nibble is us… CWE-125
Out-of-bounds Read 		CVE-2026-37535 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1017 8.8 HIGH
Adjacent 		- - miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request. A 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) receives … CWE-121
Stack-based Buffer Overflow 		CVE-2026-37536 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1018 8.1 HIGH
Adjacent 		- - collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-37537 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1019 7.5 HIGH
Network 		- - Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted bus_name. CWE-121
Stack-based Buffer Overflow 		CVE-2026-37538 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm
1020 8.4 HIGH
Local 		- - OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF h… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-37540 2026-05-8 00:53 2026-05-2 Show GitHub Exploit DB Packet Storm