Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2731	7.2	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-30804	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2732	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-30806	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2733	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-30809	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2734	6.5	警告 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2026-30811	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2735	5.4	警告 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-30812	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2736	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-30813	2026-04-24 11:36	2026-04-13	Show	GitHub Exploit DB Packet Storm

2737	7.5	重要 Network	Gardyn	Gardin API	GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-32646	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

2738	5.3	警告 Network	Gardyn	Gardin API	GardynのGardin APIにおけるアクティブ状態のデバッグコードに関する脆弱性	CWE-489 間違ったセッションへのデータの漏洩	CVE-2026-32662	2026-04-24 11:36	2026-04-3	Show	GitHub Exploit DB Packet Storm

2739	9.1	緊急 Network	Apache Software Foundation	Apache Kafka	Apache Software FoundationのApache Kafkaにおける入力で指定されたインデックス、位置、またはオフセットの不適切な検証に関する脆弱性	CWE-1285 入力で指定されたインデックス、位置、またはオフセットの不適切な検証	CVE-2026-33557	2026-04-24 11:36	2026-04-20	Show	GitHub Exploit DB Packet Storm

2740	5.3	警告 Network	Apache Software Foundation	Apache Kafka	Apache Software FoundationのApache Kafkaにおけるサーバログファイルからの情報漏えいに関する脆弱性	CWE-533 サーバログファイルからの情報漏えい	CVE-2026-33558	2026-04-24 11:35	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
141	-		-	-	Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function New	-	CVE-2026-36906	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

142	-		-	-	Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1.45.2. New	CWE-79 Cross-site Scripting	CVE-2026-34089	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

143	8.6	HIGH Network	-	-	In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded an… New	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-33362	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

144	7.5	HIGH Network	-	-	In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversi… New	CWE-326 Inadequate Encryption Strength	CVE-2026-33361	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

145	7.5	HIGH Network	-	-	In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforce… New	CWE-862 Missing Authorization	CVE-2026-33359	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

146	7.5	HIGH Network	-	-	In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated call path to openapi-euce.mearic… New	CWE-862 Missing Authorization	CVE-2026-33357	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

147	7.7	HIGH Network	-	-	In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. … New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-33356	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

148	-		-	-	The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script. The script registers the Python … New	-	CVE-2026-31254	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

149	-		-	-	The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) in its checkpoint loading mechani… New	-	CVE-2026-31253	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

150	-		-	-	CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component. The framework uses torch.load(… New	-	CVE-2026-31252	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm