|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 13, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2561 | 4.8 |
警告
Network |
mitmproxy | mitmproxy | mitmproxyにおけるLDAP インジェクションの脆弱性 |
CWE-90
LDAP インジェクション |
CVE-2026-40606 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 2562 | 7.5 |
重要
Network |
coturn project | coturn | coturn projectのcoturnにおける不正な型変換に関する脆弱性 |
CWE-704
不正な型変換またはキャスト |
CVE-2026-40613 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 2563 | 8.8 |
重要
Network |
goshs | goshs | goshsにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-40876 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 2564 | 7.5 |
重要
Network |
- | NestJSにおける再帰制御に関する脆弱性 |
CWE-674
不適切な再帰制御 |
CVE-2026-40879 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm | |
| 2565 | 7.6 |
重要
Network |
openremote | openremote | openremoteにおけるXML 外部エンティティの脆弱性 |
CWE-611
XML 外部エンティティ参照の不適切な制限 |
CVE-2026-40882 | 2026-04-27 10:47 | 2026-04-22 | Show | GitHub Exploit DB Packet Storm |
| 2566 | 8.3 |
重要
Network |
WWBN | AVideo | WWBNのAVideoにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2026-40925 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 2567 | 8.3 |
重要
Network |
RustFS | RustFS | RustFSにおける認証の欠如に関する脆弱性 |
CWE-862
認証の欠如 |
CVE-2026-40937 | 2026-04-27 10:47 | 2026-04-22 | Show | GitHub Exploit DB Packet Storm |
| 2568 | 7.1 |
重要
Network |
WWBN | AVideo | WWBNのAVideoにおける同一生成元ポリシー違反に関する脆弱性 |
CWE-346
同一生成元ポリシー違反 |
CVE-2026-41057 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 2569 | 8.1 |
重要
Network |
WWBN | AVideo | WWBNのAVideoにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-41058 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 2570 | 6.5 |
警告
Network |
WWBN | AVideo | WWBNのAVideoにおけるサーバサイドのリクエストフォージェリの脆弱性 |
CWE-918
サーバサイドリクエストフォージェリ |
CVE-2026-41060 | 2026-04-27 10:47 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 13, 2026, 5:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 315731 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-45738 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315732 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-45224 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315733 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-43749 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315734 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-42775 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315735 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-42665 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315736 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-42437 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315737 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-39450 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315738 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-38262 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315739 | - | - | - | Rejected reason: This is unused. | - | CVE-2023-38137 | 2024-02-15 03:15 | 2024-02-15 | Show | GitHub Exploit DB Packet Storm | |
| 315740 | 7.8 |
HIGH
Local |
microsoft | windows_2000 | Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sen… |
CWE-306
Missing Authentication for Critical Function |
CVE-2004-0213 | 2024-02-15 02:25 | 2004-08-6 | Show | GitHub Exploit DB Packet Storm |