|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 3, 2026, 6:08 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2971 | 9.1 |
緊急
Network |
Apache Software Foundation | Apache Wicket | Apache Software FoundationのApache Wicketにおけるセッションの固定化の脆弱性 |
CWE-384 CWE-384 |
CVE-2026-40010 | 2026-05-8 12:23 | 2026-05-6 | Show | GitHub Exploit DB Packet Storm |
| 2972 | 9.1 |
緊急
Network |
Apache Software Foundation | Apache OpenNLP | Apache Software FoundationのApache OpenNLPにおけるXML 外部エンティティの脆弱性 |
CWE-611
XML 外部エンティティ参照の不適切な制限 |
CVE-2026-40682 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2973 | 9.8 |
緊急
Network |
Apache Software Foundation | Apache OpenNLP | Apache Software FoundationのApache OpenNLPにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 |
CWE-470
クラスまたはコードを選択する外部から制御された入力の使用 |
CVE-2026-42027 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2974 | 6.5 |
警告
Network |
nginxui | Nginx UI | Nginx UI TeamのNginx UIにおける複数の脆弱性 |
CWE-200 CWE-863 |
CVE-2026-42220 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2975 | 9.8 |
緊急
Network |
nginxui | Nginx UI | Nginx UI TeamのNginx UIにおける重要な機能に対する認証の欠如に関する脆弱性 |
CWE-306
重要な機能に対する認証の欠如 解説 |
CVE-2026-42221 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2976 | 9.8 |
緊急
Network |
nginxui | Nginx UI | Nginx UI TeamのNginx UIにおける複数の脆弱性 |
CWE-284 CWE-306 |
CVE-2026-42222 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2977 | 6.5 |
警告
Network |
nginxui | Nginx UI | Nginx UI TeamのNginx UIにおける情報漏えいに関する脆弱性 |
CWE-200
情報漏えい |
CVE-2026-42223 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2978 | 7.5 |
重要
Network |
n8n | n8n | n8nにおける認証の欠如に関する脆弱性 |
CWE-862
認証の欠如 |
CVE-2026-42226 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2979 | 6.5 |
警告
Network |
n8n | n8n | n8nにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-42227 | 2026-05-8 12:23 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2980 | 6.5 |
警告
Network |
n8n | n8n | n8nにおける認証の欠如に関する脆弱性 |
CWE-862
認証の欠如 |
CVE-2026-42228 | 2026-05-8 12:22 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 4, 2026, 4:17 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 312741 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cra… |
CWE-125
Out-of-bounds Read |
CVE-2024-8589 | 2024-11-2 01:18 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312742 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cras… |
CWE-125
Out-of-bounds Read |
CVE-2024-9827 | 2024-11-2 01:17 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312743 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write … |
CWE-416
Use After Free |
CVE-2024-9826 | 2024-11-2 01:17 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312744 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a cras… |
CWE-787
Out-of-bounds Write |
CVE-2024-8600 | 2024-11-2 01:17 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312745 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a cras… |
CWE-787
Out-of-bounds Write |
CVE-2024-8599 | 2024-11-2 01:17 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312746 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a cras… |
CWE-787
Out-of-bounds Write |
CVE-2024-8598 | 2024-11-2 01:17 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312747 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash… |
CWE-787
Out-of-bounds Write |
CVE-2024-8597 | 2024-11-2 01:17 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312748 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force an Out-of-Bound Write vulnerability. A malicious actor can leverage this vulnerability to cause a cras… |
CWE-787
Out-of-bounds Write |
CVE-2024-8596 | 2024-11-2 01:17 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312749 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cra… |
CWE-125
Out-of-bounds Read |
CVE-2024-8588 | 2024-11-2 01:16 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312750 | 8.8 |
HIGH
Network |
tenda | rx9_pro_firmware | A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub_424CE0 of the file /goform/setMacFilterCfg of the component POST Request Han… |
CWE-787
Out-of-bounds Write |
CVE-2024-10351 | 2024-11-2 01:15 | 2024-10-25 | Show | GitHub Exploit DB Packet Storm |