Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
981 7 重要
Local
flos-freeware (Florian Balmer) Notepad2 flos-freeware (Florian Balmer)のNotepad2における複数の脆弱性 CWE-426
CWE-427
CVE-2026-4545 2026-05-1 10:38 2026-03-22 Show GitHub Exploit DB Packet Storm
982 7 重要
Local
flos-freeware (Florian Balmer) Notepad2 flos-freeware (Florian Balmer)のNotepad2における複数の脆弱性 CWE-426
CWE-427
CVE-2026-4546 2026-05-1 10:38 2026-03-22 Show GitHub Exploit DB Packet Storm
983 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. 4G03 Pro Firmware Shenzhen Tenda Technology Co.,Ltd.の4G03 Pro Firmwareにおける複数の脆弱性 CWE-266
CWE-284
CVE-2026-5526 2026-05-1 10:38 2026-04-4 Show GitHub Exploit DB Packet Storm
984 5.3 警告
Network
Shenzhen Tenda Technology Co.,Ltd. 4G03 Pro Firmware Shenzhen Tenda Technology Co.,Ltd.の4G03 Pro Firmwareにおける複数の脆弱性 CWE-320
CWE-321
CVE-2026-5527 2026-05-1 10:38 2026-04-5 Show GitHub Exploit DB Packet Storm
985 8 重要
Adjacent
Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5683 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
986 8 重要
Adjacent
Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5684 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
987 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5685 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
988 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5686 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
989 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5687 2026-05-1 10:38 2026-04-6 Show GitHub Exploit DB Packet Storm
990 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7019 2026-05-1 10:38 2026-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312841 5.5 MEDIUM
Local
ofono_project ofono oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authent… CWE-125
Out-of-bounds Read
CVE-2024-7537 2024-08-30 03:01 2024-08-6 Show GitHub Exploit DB Packet Storm
312842 7.8 HIGH
Local
ofono_project ofono oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obt… CWE-787
 Out-of-bounds Write
CVE-2024-7539 2024-08-30 02:59 2024-08-6 Show GitHub Exploit DB Packet Storm
312843 7.8 HIGH
Local
ofono_project ofono oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker mus… CWE-787
 Out-of-bounds Write
CVE-2024-7538 2024-08-30 02:59 2024-08-6 Show GitHub Exploit DB Packet Storm
312844 3.3 LOW
Local
ofono_project ofono oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An a… CWE-908
 Use of Uninitialized Resource
CVE-2024-7540 2024-08-30 02:58 2024-08-6 Show GitHub Exploit DB Packet Storm
312845 3.3 LOW
Local
ofono_project ofono oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An at… CWE-908
 Use of Uninitialized Resource
CVE-2024-7541 2024-08-30 02:57 2024-08-6 Show GitHub Exploit DB Packet Storm
312846 3.3 LOW
Local
ofono_project ofono oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An a… CWE-908
 Use of Uninitialized Resource
CVE-2024-7542 2024-08-30 02:56 2024-08-6 Show GitHub Exploit DB Packet Storm
312847 7.8 HIGH
Local
ofono_project ofono oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker mus… CWE-787
 Out-of-bounds Write
CVE-2024-7546 2024-08-30 02:55 2024-08-6 Show GitHub Exploit DB Packet Storm
312848 5.4 MEDIUM
Network
haloservicesolutions haloitsm HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. The injected JavaScript code can execute arbitrary action on behalf of the user accessing a ticket. … CWE-79
Cross-site Scripting
CVE-2024-6200 2024-08-30 02:53 2024-08-6 Show GitHub Exploit DB Packet Storm
312849 5.3 MEDIUM
Network
haloservicesolutions haloitsm HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails. This can lead to the leakage of potentially sensitive information. HaloIT… NVD-CWE-Other
CVE-2024-6201 2024-08-30 02:52 2024-08-6 Show GitHub Exploit DB Packet Storm
312850 9.8 CRITICAL
Network
haloservicesolutions haloitsm HaloITSM versions up to 2.146.1 are affected by a SAML XML Signature Wrapping (XSW) vulnerability. When having a SAML integration configured, anonymous actors could impersonate arbitrary HaloITSM use… CWE-863
 Incorrect Authorization
CVE-2024-6202 2024-08-30 02:48 2024-08-6 Show GitHub Exploit DB Packet Storm