Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 6, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1441 | 7.6 |
重要
Network |
WWBN | AVideo | WWBNのAVideoにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-39369 | 2026-04-24 11:42 | 2026-04-7 | Show | GitHub Exploit DB Packet Storm |
| 1442 | 7.1 |
重要
Network |
WWBN | AVideo | WWBNのAVideoにおけるサーバサイドのリクエストフォージェリの脆弱性 |
CWE-918
サーバサイドリクエストフォージェリ |
CVE-2026-39370 | 2026-04-24 11:42 | 2026-04-7 | Show | GitHub Exploit DB Packet Storm |
| 1443 | 7.8 |
重要
Local |
Vim | Vim | Vimにおけるコードインジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2026-39881 | 2026-04-24 11:42 | 2026-04-8 | Show | GitHub Exploit DB Packet Storm |
| 1444 | 5.3 |
警告
Network |
OpenEXR | OpenEXR | OpenEXRにおける整数オーバーフローの脆弱性 |
CWE-190
整数オーバーフローまたはラップアラウンド |
CVE-2026-39886 | 2026-04-24 11:42 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 1445 | 8.8 |
重要
Network |
Mervin Praison (MervinPraison) | PraisonAI | Mervin Praison (MervinPraison)のPraisonAIにおけるコードインジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2026-39891 | 2026-04-24 11:42 | 2026-04-8 | Show | GitHub Exploit DB Packet Storm |
| 1446 | 4.3 |
警告
Network |
lycheeorg | lychee | lycheeorgのLycheeにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-39957 | 2026-04-24 11:42 | 2026-04-9 | Show | GitHub Exploit DB Packet Storm |
| 1447 | 9.6 |
緊急
Network |
MISP | MISP | MISPにおけるLDAP インジェクションの脆弱性 |
CWE-90
LDAP インジェクション |
CVE-2026-39962 | 2026-04-24 11:42 | 2026-04-9 | Show | GitHub Exploit DB Packet Storm |
| 1448 | 6.9 |
警告
Network |
s9y | Serendipity | s9yのSerendipityにおける検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 |
CWE-565
検証および完全性チェックを行っていない Cookie への依存 |
CVE-2026-39963 | 2026-04-24 11:42 | 2026-04-15 | Show | GitHub Exploit DB Packet Storm |
| 1449 | 7.2 |
重要
Network |
s9y | Serendipity | s9yのSerendipityにおけるHTTP レスポンス分割に関する脆弱性 |
CWE-113
HTTP レスポンスの分割 |
CVE-2026-39971 | 2026-04-24 11:42 | 2026-04-15 | Show | GitHub Exploit DB Packet Storm |
| 1450 | 7.1 |
重要
Local |
apktool | apktool | Apktoolにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-39973 | 2026-04-24 11:42 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 641 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6528 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 642 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-6529 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 643 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-6530 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 644 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5409 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 645 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6521 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 646 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6522 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 647 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6523 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 648 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-824
Access of Uninitialized Pointer |
CVE-2026-6524 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 649 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5299 | 2026-05-2 04:26 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 650 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5401 | 2026-05-2 04:26 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |