Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 3, 2026, 6:08 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3571 | 7.5 |
重要
Network |
- | 4D SASの4D ServerにおけるXML 外部エンティティの脆弱性 |
CWE-611
XML 外部エンティティ参照の不適切な制限 |
CVE-2024-39847 | 2026-05-7 11:29 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm | |
| 3572 | 9.1 |
緊急
Network |
rti | RTI Connext Professional | rtiのRTI Connext ProfessionalにおけるXML 外部エンティティの脆弱性 |
CWE-611
XML 外部エンティティ参照の不適切な制限 |
CVE-2025-14543 | 2026-05-7 11:29 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 3573 | 7.5 |
重要
Network |
XWiki | CryptPad | XWikiのCryptPadにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 |
CWE-770
制限またはスロットリング無しのリソースの割り当て |
CVE-2025-51846 | 2026-05-7 11:29 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 3574 | 6.4 |
警告
Local |
レッドハット | process automation manager | レッドハットのprocess automation managerにおける不適切なデフォルトパーミッションに関する脆弱性 |
CWE-276
不適切なデフォルトパーミッション |
CVE-2025-58713 | 2026-05-7 11:29 | 2026-04-8 | Show | GitHub Exploit DB Packet Storm |
| 3575 | 4.8 |
警告
Network |
GNU Project | GNU Wget2 | GNU ProjectのGNU Wget2における入力確認に関する脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2026-1858 | 2026-05-7 11:28 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 3576 | 6.5 |
警告
Adjacent |
シスコシステムズ |
Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software |
シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における範囲外のポインタオフセットの使用に関する脆弱性 |
CWE-823
範囲外のポインタオフセットの使用 |
CVE-2026-20022 | 2026-05-7 11:28 | 2026-03-4 | Show | GitHub Exploit DB Packet Storm |
| 3577 | 6.5 |
警告
Adjacent |
シスコシステムズ |
Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software |
シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における境界外書き込みに関する脆弱性 |
CWE-787
境界外書き込み |
CVE-2026-20023 | 2026-05-7 11:28 | 2026-03-4 | Show | GitHub Exploit DB Packet Storm |
| 3578 | 5.7 |
警告
Adjacent |
シスコシステムズ |
Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software |
シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品におけるバッファエラーの脆弱性 |
CWE-119
バッファエラー |
CVE-2026-20024 | 2026-05-7 11:28 | 2026-03-4 | Show | GitHub Exploit DB Packet Storm |
| 3579 | 8.6 |
重要
Network |
シスコシステムズ | Adaptive Security Appliance (ASA) Software | シスコシステムズのAdaptive Security Appliance (ASA) Softwareにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性 |
CWE-772
有効なライフタイム後のリソースの解放の欠如 |
CVE-2026-20082 | 2026-05-7 11:28 | 2026-03-4 | Show | GitHub Exploit DB Packet Storm |
| 3580 | 5 |
警告
Network |
Cloud Foundry, Inc. |
routing release cf-deployment |
Cloud Foundry, Inc.のCf-deployment等の複数製品における意図するエンドポイントとの通信チャネルの制限に関する脆弱性 |
CWE-923
意図するエンドポイントとの通信チャネルの不適切な制限 |
CVE-2026-22726 | 2026-05-7 11:28 | 2026-05-1 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 3, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 315901 | 6.1 |
MEDIUM
Network |
outtolunchproductions | simple_headline_rotator | The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin … |
CWE-79
Cross-site Scripting |
CVE-2024-7860 | 2024-09-28 05:56 | 2024-09-12 | Show | GitHub Exploit DB Packet Storm |
| 315902 | 6.1 |
MEDIUM
Network |
michalaugustyniak | misiek_paypal | The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a… |
CWE-79
Cross-site Scripting |
CVE-2024-7861 | 2024-09-28 05:52 | 2024-09-12 | Show | GitHub Exploit DB Packet Storm |
| 315903 | 5.7 |
MEDIUM
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks. |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2024-7698 | 2024-09-28 04:39 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 315904 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43387 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 315905 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43386 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 315906 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43385 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 315907 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. |
NVD-CWE-noinfo
|
CVE-2024-43388 | 2024-09-28 04:32 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 315908 | 7.1 |
HIGH
Local |
moxa |
mxview_one mxview_one_central_manager |
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensit… |
CWE-312
Cleartext Storage of Sensitive Information |
CVE-2024-6785 | 2024-09-28 03:59 | 2024-09-21 | Show | GitHub Exploit DB Packet Storm |
| 315909 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data. |
CWE-78
OS Command |
CVE-2024-7699 | 2024-09-28 03:59 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 315910 | 7.8 |
HIGH
Local |
logitech | logi_options\+ | Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuse… |
CWE-94
Code Injection |
CVE-2024-8258 | 2024-09-28 03:56 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |