Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 10, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2711 | 7.8 |
重要
Local |
マイクロソフト | Kiota | マイクロソフトのKiotaにおけるコードインジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2026-41134 | 2026-05-18 12:05 | 2026-04-22 | Show | GitHub Exploit DB Packet Storm |
| 2712 | 8.2 |
重要
Network |
Kata Containers |
Confidential Containers Kata Containers |
Kata ContainersのConfidential Containers等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性 |
CWE-61
UNIX Symbolic Link のフォロー |
CVE-2026-41326 | 2026-05-18 12:05 | 2026-04-24 | Show | GitHub Exploit DB Packet Storm |
| 2713 | 8.4 |
重要
Local |
opentelemetry | OpenTelemetry eBPF Instrumentation | opentelemetryのOpenTelemetry eBPF Instrumentationにおける複数の脆弱性 |
CWE-22 CWE-59 |
CVE-2026-41433 | 2026-05-18 12:05 | 2026-04-24 | Show | GitHub Exploit DB Packet Storm |
| 2714 | 5.3 |
警告
Network |
RedwoodSDK | RedwoodSDK | RedwoodjsのRedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2026-42190 | 2026-05-18 12:05 | 2026-05-8 | Show | GitHub Exploit DB Packet Storm |
| 2715 | 7.2 |
重要
Network |
FileMaker, Inc | Claris FileMaker Cloud | Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker Cloudにおけるコードインジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2026-43680 | 2026-05-18 12:05 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 2716 | 7.2 |
重要
Network |
FileMaker, Inc | Claris FileMaker Cloud | Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker CloudにおけるOS コマンドインジェクションの脆弱性 |
CWE-78
OSコマンド・インジェクション |
CVE-2026-43685 | 2026-05-18 12:05 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 2717 | 6.5 |
警告
Network |
Shellhub | Shellhub | Shellhubにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-44426 | 2026-05-18 12:05 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
| 2718 | 9.8 |
緊急
Network |
Yarbo |
Lawn Mower Pro Firmware Lawn Mower Firmware |
YarboのLawn Mower Firmware等の複数製品における非公開の機能に関する脆弱性 |
CWE-912 CWE-noinfo |
CVE-2026-7413 | 2026-05-18 12:05 | 2026-05-7 | Show | GitHub Exploit DB Packet Storm |
| 2719 | 9.8 |
緊急
Network |
Yarbo |
Lawn Mower Pro Firmware Lawn Mower Firmware |
YarboのLawn Mower Firmware等の複数製品におけるハードコードされた認証情報の使用に関する脆弱性 |
CWE-798
ハードコードされた認証情報の使用 |
CVE-2026-7414 | 2026-05-18 12:05 | 2026-05-7 | Show | GitHub Exploit DB Packet Storm |
| 2720 | 9.8 |
緊急
Network |
Yarbo |
Lawn Mower Pro Firmware Lawn Mower Firmware |
YarboのLawn Mower Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 |
CWE-306
重要な機能に対する認証の欠如 解説 |
CVE-2026-7415 | 2026-05-18 12:05 | 2026-05-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 10, 2026, 5 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 317821 | 4.8 |
MEDIUM
Network |
premio | my_sticky_bar | The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputtin… |
CWE-79
Cross-site Scripting |
CVE-2024-7133 | 2024-09-28 06:27 | 2024-09-13 | Show | GitHub Exploit DB Packet Storm |
| 317822 | 6.5 |
MEDIUM
Network |
pixeljar | favicon_generator | The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitra… |
CWE-352
Origin Validation Error |
CVE-2024-7864 | 2024-09-28 06:26 | 2024-09-13 | Show | GitHub Exploit DB Packet Storm |
| 317823 | 6.5 |
MEDIUM
Network |
gowildchild | visual_sound | The Visual Sound (old) WordPress plugin through 1.06 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack |
CWE-352
Origin Validation Error |
CVE-2024-8047 | 2024-09-28 06:25 | 2024-09-17 | Show | GitHub Exploit DB Packet Storm |
| 317824 | 6.1 |
MEDIUM
Network |
outtolunchproductions | simple_headline_rotator | The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin … |
CWE-79
Cross-site Scripting |
CVE-2024-7860 | 2024-09-28 05:56 | 2024-09-12 | Show | GitHub Exploit DB Packet Storm |
| 317825 | 6.1 |
MEDIUM
Network |
michalaugustyniak | misiek_paypal | The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a… |
CWE-79
Cross-site Scripting |
CVE-2024-7861 | 2024-09-28 05:52 | 2024-09-12 | Show | GitHub Exploit DB Packet Storm |
| 317826 | 5.7 |
MEDIUM
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks. |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2024-7698 | 2024-09-28 04:39 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 317827 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43387 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 317828 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43386 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 317829 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43385 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 317830 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. |
NVD-CWE-noinfo
|
CVE-2024-43388 | 2024-09-28 04:32 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |