Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3251 | 9.8 |
緊急
Network |
Shenzhen Tenda Technology Co.,Ltd. | w30e ファームウェア | Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおけるコマンドインジェクションの脆弱性 |
CWE-77
コマンドインジェクション |
CVE-2026-38835 | 2026-04-30 12:29 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 3252 | 5.4 |
警告
Network |
pyLoad | pyLoad | pyLoadにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-40071 | 2026-04-30 12:29 | 2026-04-9 | Show | GitHub Exploit DB Packet Storm |
| 3253 | 6.5 |
警告
Network |
getkirby | kirby | getkirbyのkirbyにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-40099 | 2026-04-30 12:29 | 2026-04-24 | Show | GitHub Exploit DB Packet Storm |
| 3254 | 5.4 |
警告
Network |
Auth0 Inc. | nextjs-auth0 | Auth0 Inc.のnextjs-auth0における複数の脆弱性 |
CWE-362 CWE-863 |
CVE-2026-40155 | 2026-04-30 12:29 | 2026-04-17 | Show | GitHub Exploit DB Packet Storm |
| 3255 | 5.5 |
警告
Local |
systemd project | systemd | systemd projectのsystemdにおける不適切な動作順序に関する脆弱性 |
CWE-696
不適切な動作順序 |
CVE-2026-40223 | 2026-04-30 12:29 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 3256 | 7.3 |
重要
Local |
systemd project | systemd | systemd projectのsystemdにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-40224 | 2026-04-30 12:29 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 3257 | 6.4 |
警告
Physics |
systemd project | systemd | systemd projectのsystemdにおける領域間での誤ったリソース移動に関する脆弱性 |
CWE-669
領域間での誤ったリソース移動 |
CVE-2026-40225 | 2026-04-30 12:28 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 3258 | 6.1 |
警告
Network |
FreeRDP | FreeRDP | FreeRDPにおける境界条件の判定に関する脆弱性 |
CWE-193
境界条件の判定 |
CVE-2026-40254 | 2026-04-30 12:28 | 2026-04-24 | Show | GitHub Exploit DB Packet Storm |
| 3259 | 3.7 |
低
Network |
BACnet Stack | BACnet Stack | BACnet Stackにおける未定義、未指定、または実装定義の動作への依存に関する脆弱性 |
CWE-758
未定義、未指定、または実装定義の動作への依存 |
CVE-2026-40279 | 2026-04-30 12:28 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 3260 | 7.6 |
重要
Network |
WeGIA | WeGIA | WeGIAにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2026-40283 | 2026-04-30 12:28 | 2026-04-17 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 25, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 314111 | 7.1 |
HIGH
Local |
microsoft | azure_network_watcher_agent | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38188 | 2024-09-18 02:49 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314112 | 7.3 |
HIGH
Local |
microsoft | azure_network_watcher_agent | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43470 | 2024-09-18 02:35 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314113 | 3.1 |
LOW
Adjacent |
rapid7 | insight_platform | Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of… |
CWE-862
Missing Authorization |
CVE-2024-8042 | 2024-09-18 02:25 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 314114 | 7.5 |
HIGH
Adjacent |
microsoft |
windows_10_1507 windows_server_2019 windows_server_2022 windows_server_2022_23h2 windows_11_24h2 windows_10_1607 windows_server_2016 windows_10_22h2 windows_11_23h2 windows… |
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38119 | 2024-09-18 02:23 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314115 | 9.9 |
CRITICAL
Network |
microsoft | azure_web_apps | An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network. |
NVD-CWE-noinfo
|
CVE-2024-38194 | 2024-09-18 02:02 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314116 | 9.0 |
CRITICAL
Network |
microsoft | azure_stack_hub | Azure Stack Hub Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38216 | 2024-09-18 02:00 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314117 | 7.5 |
HIGH
Network |
dlink | di-8100_firmware | D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function. |
CWE-787
Out-of-bounds Write |
CVE-2024-44375 | 2024-09-18 02:00 | 2024-09-9 | Show | GitHub Exploit DB Packet Storm |
| 314118 | 9.0 |
CRITICAL
Network |
microsoft | azure_stack_hub | Azure Stack Hub Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38220 | 2024-09-18 01:59 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314119 | 9.8 |
CRITICAL
Network |
microsoft | dynamics_365_business_central | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38225 | 2024-09-18 01:58 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |
| 314120 | 7.2 |
HIGH
Network |
microsoft | sharepoint_server | Microsoft SharePoint Server Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-38228 | 2024-09-18 01:57 | 2024-09-11 | Show | GitHub Exploit DB Packet Storm |