Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2321	9.8	緊急 Network	ProSoft Technology	ICX35-HWC Firmware	ProSoft TechnologyのICX35-HWC FirmwareにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2017-20236	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

2322	4.9	警告 Network	Fortra	GoAnywhere Agents GoAnywhere Managed File Transfer	FortraのGoAnywhere Agents等の複数製品における暗号強度に関する脆弱性	CWE-326 不適切な暗号強度	CVE-2025-1241	2026-04-24 11:36	2026-04-21	Show	GitHub Exploit DB Packet Storm

2323	7.3	重要 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2025-14362	2026-04-24 11:36	2026-04-21	Show	GitHub Exploit DB Packet Storm

2324	8.1	重要 Network	Gardyn	Gardin API	GardynのGardin APIにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-25197	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

2325	4.8	警告 Network	LibreNMS	LibreNMS	LibreNMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-2728	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2326	7.5	重要 Network	Gardyn	Gardin API	GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-28766	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

2327	5.3	警告 Network	Gardyn	Gardin API	GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-28767	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

2328	3.7	低 Network	ERLANG	Erlang/OTP	ERLANGのErlang/OTPにおける予測可能な数字や識別子の生成に関する脆弱性	CWE-340 予測可能な数字や識別子の生成	CVE-2026-28810	2026-04-24 11:36	2026-04-7	Show	GitHub Exploit DB Packet Storm

2329	7.2	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-30804	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2330	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-30806	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
511	-	-	-	SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality … New	CWE-862 Missing Authorization	CVE-2026-44125	2026-05-9 00:51	2026-05-8	Show	GitHub Exploit DB Packet Storm

512	-	-	-	SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers to execute code vi… New	CWE-502 Deserialization of Untrusted Data	CVE-2026-44126	2026-05-9 00:51	2026-05-8	Show	GitHub Exploit DB Packet Storm

513	-	-	-	SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to… New	CWE-73 External Control of File Name or Path	CVE-2026-44127	2026-05-9 00:51	2026-05-8	Show	GitHub Exploit DB Packet Storm

514	-	-	-	SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's e… New	CWE-95 Eval Injection	CVE-2026-44128	2026-05-9 00:51	2026-05-8	Show	GitHub Exploit DB Packet Storm

515	-	-	-	SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remot… New	CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine	CVE-2026-44129	2026-05-9 00:51	2026-05-8	Show	GitHub Exploit DB Packet Storm

516	-	-	-	SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system i… New	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-7864	2026-05-9 00:51	2026-05-8	Show	GitHub Exploit DB Packet Storm

517	-	-	-	An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity p… New	CWE-306 Missing Authentication for Critical Function	CVE-2026-6736	2026-05-9 00:49	2026-05-8	Show	GitHub Exploit DB Packet Storm

518	-	-	-	A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON p… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-7541	2026-05-9 00:49	2026-05-8	Show	GitHub Exploit DB Packet Storm

519	-	-	-	A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The redirect_to query parameter on the /setup/… New	CWE-79 Cross-site Scripting	CVE-2026-8106	2026-05-9 00:49	2026-05-8	Show	GitHub Exploit DB Packet Storm

520	-	-	-	A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services by exploiting URL parser confusi… New	CWE-436 CWE-918 Interpretation Conflict Server-Side Request Forgery (SSRF)	CVE-2026-8034	2026-05-9 00:49	2026-05-8	Show	GitHub Exploit DB Packet Storm