Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2991 | 8.8 |
重要
Network |
n8n | n8n | n8nにおけるコードインジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2026-42234 | 2026-05-8 12:22 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2992 | 9.6 |
緊急
Network |
n8n | n8n | n8nにおける複数の脆弱性 |
CWE-79 CWE-87 |
CVE-2026-42235 | 2026-05-8 12:22 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2993 | 7.5 |
重要
Network |
n8n | n8n | n8nにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 |
CWE-770
制限またはスロットリング無しのリソースの割り当て |
CVE-2026-42236 | 2026-05-8 12:22 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2994 | 8.8 |
重要
Network |
n8n | n8n | n8nにおけるSQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2026-42237 | 2026-05-8 12:22 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2995 | 9.8 |
緊急
Network |
nginxui | Nginx UI | Nginx UI TeamのNginx UIにおけるコードインジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2026-42238 | 2026-05-8 12:22 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2996 | 7.7 |
重要
Network |
OpenClaw | OpenClaw | OpenClawにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-42438 | 2026-05-8 12:22 | 2026-05-5 | Show | GitHub Exploit DB Packet Storm |
| 2997 | 8.5 |
重要
Network |
OpenClaw | OpenClaw | OpenClawにおける複数の脆弱性 |
CWE-862 CWE-918 |
CVE-2026-42439 | 2026-05-8 12:22 | 2026-05-5 | Show | GitHub Exploit DB Packet Storm |
| 2998 | 7.5 |
重要
Network |
Apache Software Foundation | Apache OpenNLP | Apache Software FoundationのApache OpenNLPにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 |
CWE-789
過剰なサイズ値のメモリ割り当て |
CVE-2026-42440 | 2026-05-8 12:22 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 2999 | 6.1 |
警告
Network |
Apache Software Foundation | Apache Wicket | Apache Software FoundationのApache Wicketにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2026-42509 | 2026-05-8 12:22 | 2026-05-6 | Show | GitHub Exploit DB Packet Storm |
| 3000 | 4.3 |
警告
Network |
Jenkins プロジェクト | Script Security | JenkinsのScript Securityにおける認証の欠如に関する脆弱性 |
CWE-862
認証の欠如 |
CVE-2026-42519 | 2026-05-8 12:22 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 4, 2026, 4:17 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 312731 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt |
A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write … |
CWE-787
Out-of-bounds Write |
CVE-2024-9489 | 2024-11-2 01:27 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312732 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt |
A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a … |
CWE-908
Use of Uninitialized Resource |
CVE-2024-8896 | 2024-11-2 01:27 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312733 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt |
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to … |
CWE-787
Out-of-bounds Write |
CVE-2024-7992 | 2024-11-2 01:26 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312734 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d dwg_trueview autocad_lt |
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a… |
CWE-787
Out-of-bounds Write |
CVE-2024-7991 | 2024-11-2 01:26 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312735 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a… |
CWE-787
Out-of-bounds Write |
CVE-2024-8592 | 2024-11-2 01:22 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312736 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, wr… |
CWE-416
Use After Free |
CVE-2024-8595 | 2024-11-2 01:18 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312737 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a cras… |
CWE-787
Out-of-bounds Write |
CVE-2024-8594 | 2024-11-2 01:18 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312738 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted CATPART file when parsed in ASMKERN230A.dll through Autodesk AutoCAD can force a Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a… |
CWE-787
Out-of-bounds Write |
CVE-2024-8593 | 2024-11-2 01:18 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312739 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to ca… |
CWE-787
Out-of-bounds Write |
CVE-2024-8591 | 2024-11-2 01:18 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |
| 312740 | 7.8 |
HIGH
Local |
autodesk |
autocad autocad_advance_steel autocad_architecture autocad_civil_3d autocad_electrical autocad_mechanical autocad_mep autocad_plant_3d |
A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write… |
CWE-416
Use After Free |
CVE-2024-8590 | 2024-11-2 01:18 | 2024-10-30 | Show | GitHub Exploit DB Packet Storm |