Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3251 | 9.8 |
緊急
Network |
Shenzhen Tenda Technology Co.,Ltd. | w30e ファームウェア | Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおけるコマンドインジェクションの脆弱性 |
CWE-77
コマンドインジェクション |
CVE-2026-38835 | 2026-04-30 12:29 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 3252 | 5.4 |
警告
Network |
pyLoad | pyLoad | pyLoadにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-40071 | 2026-04-30 12:29 | 2026-04-9 | Show | GitHub Exploit DB Packet Storm |
| 3253 | 6.5 |
警告
Network |
getkirby | kirby | getkirbyのkirbyにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-40099 | 2026-04-30 12:29 | 2026-04-24 | Show | GitHub Exploit DB Packet Storm |
| 3254 | 5.4 |
警告
Network |
Auth0 Inc. | nextjs-auth0 | Auth0 Inc.のnextjs-auth0における複数の脆弱性 |
CWE-362 CWE-863 |
CVE-2026-40155 | 2026-04-30 12:29 | 2026-04-17 | Show | GitHub Exploit DB Packet Storm |
| 3255 | 5.5 |
警告
Local |
systemd project | systemd | systemd projectのsystemdにおける不適切な動作順序に関する脆弱性 |
CWE-696
不適切な動作順序 |
CVE-2026-40223 | 2026-04-30 12:29 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 3256 | 7.3 |
重要
Local |
systemd project | systemd | systemd projectのsystemdにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-40224 | 2026-04-30 12:29 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 3257 | 6.4 |
警告
Physics |
systemd project | systemd | systemd projectのsystemdにおける領域間での誤ったリソース移動に関する脆弱性 |
CWE-669
領域間での誤ったリソース移動 |
CVE-2026-40225 | 2026-04-30 12:28 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 3258 | 6.1 |
警告
Network |
FreeRDP | FreeRDP | FreeRDPにおける境界条件の判定に関する脆弱性 |
CWE-193
境界条件の判定 |
CVE-2026-40254 | 2026-04-30 12:28 | 2026-04-24 | Show | GitHub Exploit DB Packet Storm |
| 3259 | 3.7 |
低
Network |
BACnet Stack | BACnet Stack | BACnet Stackにおける未定義、未指定、または実装定義の動作への依存に関する脆弱性 |
CWE-758
未定義、未指定、または実装定義の動作への依存 |
CVE-2026-40279 | 2026-04-30 12:28 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 3260 | 7.6 |
重要
Network |
WeGIA | WeGIA | WeGIAにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2026-40283 | 2026-04-30 12:28 | 2026-04-17 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 25, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 314081 | 8.1 |
HIGH
Network |
microsoft |
windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_11_24h2 windows_10_22h2 windows_11_23h2 windows_11_22h2 windows_11_21h2 windows_10_1809 windows_10_… |
Windows TCP/IP Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38045 | 2024-09-19 00:04 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314082 | 8.8 |
HIGH
Network |
microsoft | sharepoint_server | Microsoft SharePoint Server Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38018 | 2024-09-19 00:04 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314083 | 7.8 |
HIGH
Local |
microsoft |
windows_10_1507 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_11_24h2 windows_10_1607 windows_server_2016 windows_10_22h2 windows_11_23h2 windows… |
PowerShell Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38046 | 2024-09-19 00:02 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314084 | 6.5 |
MEDIUM
Network |
microsoft | outlook | Microsoft Outlook for iOS Information Disclosure Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43482 | 2024-09-18 23:11 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314085 | 6.5 |
MEDIUM
Network |
microsoft |
windows_server_2012 windows_10_1507 windows_10_1809 windows_server_2019 windows_10_21h2 windows_10_1607 windows_server_2016 windows_10_22h2 |
Windows Mark of the Web Security Feature Bypass Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43487 | 2024-09-18 23:10 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314086 | 7.8 |
HIGH
Local |
microsoft | autoupdate | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43492 | 2024-09-18 22:57 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314087 | 7.3 |
HIGH
Local |
microsoft |
windows_11_22h2 windows_server_2022_23h2 windows_11_23h2 |
Windows libarchive Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43495 | 2024-09-18 22:55 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314088 | 7.8 |
HIGH
Local |
android | there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need… |
NVD-CWE-noinfo
|
CVE-2024-29779 | 2024-09-18 22:52 | 2024-09-14 | Show | GitHub Exploit DB Packet Storm | |
| 314089 | 7.8 |
HIGH
Local |
android | In TBD of TBD, there is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could lead to local escalation of privilege with no additional executio… |
NVD-CWE-noinfo
|
CVE-2024-44092 | 2024-09-18 22:51 | 2024-09-14 | Show | GitHub Exploit DB Packet Storm | |
| 314090 | 7.8 |
HIGH
Local |
android | In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privi… |
CWE-787
Out-of-bounds Write |
CVE-2024-44093 | 2024-09-18 22:42 | 2024-09-14 | Show | GitHub Exploit DB Packet Storm |