Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 25, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3591 | - | - | dnsmasq | dnsmasq | dnsmasqにおける複数の脆弱性 | - |
CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172 |
2026-05-27 12:17 | 2026-05-26 | Show | GitHub Exploit DB Packet Storm |
| 3592 | - | - | Linux | Linux Kernel | Linuxカーネルにおける複数の脆弱性 | - |
CVE-2026-31431 CVE-2026-43284 CVE-2026-43500 |
2026-05-26 14:07 | 2026-05-25 | Show | GitHub Exploit DB Packet Storm |
| 3593 | 6.8 |
警告
Adjacent |
日本電気 |
Aterm CM51FD Aterm MR51FN |
NEC AtermシリーズにおけるOSコマンドインジェクションの脆弱性（NV26-003） |
CWE-78
OSコマンド・インジェクション |
CVE-2026-8652 | 2026-05-25 15:43 | 2026-05-25 | Show | GitHub Exploit DB Packet Storm |
| 3594 | - | - | （複数のベンダ） | （複数の製品） | CISA ICS Advisory / ICS Medical Advisory（2026年05月21日） | - | - | 2026-05-25 15:37 | 2026-05-22 | Show | GitHub Exploit DB Packet Storm |
| 3595 | 3.8 |
低
Adjacent |
日本電気 |
Aterm WX11000T12 Aterm WX4200D5 Aterm 19000T12BE Aterm WX7800T8 Aterm WX5400HP Aterm WX3000HP2 Aterm WX1800HP Aterm GX621A1 Aterm … |
NEC Atermシリーズにおけるクロスサイトスクリプティングの脆弱性（NV26-002） |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2026-6059 | 2026-05-25 15:29 | 2026-05-25 | Show | GitHub Exploit DB Packet Storm |
| 3596 | - | - | 日立 | Hitachi Virtual Storage Platform | 日立ディスクアレイシステムにおけるSVP 脆弱性対策について (2026年3月分) | - |
CVE-2026-23667 CVE-2026-23668 CVE-2026-23669 CVE-2026-23671 CVE-2026-23672 CVE-2026-23673 CVE-2026-23674 CVE-2026-24282 CVE-2026-24285 CVE-2026-24287 CVE-2026-24288 C… |
2026-05-25 11:30 | 2026-05-20 | Show | GitHub Exploit DB Packet Storm |
| 3597 | 5.5 |
警告
Local |
Amazon.com, Inc. | AWS API MCP Server | Amazon.com, Inc.のAWS API MCP Serverにおける代替パスの保護に関する脆弱性 |
CWE-424
代替パスの不適切な保護 |
CVE-2026-4270 | 2026-05-25 10:26 | 2026-03-16 | Show | GitHub Exploit DB Packet Storm |
| 3598 | 6.5 |
警告
Network |
ベリタス | Veritas InfoScale Operations Manager | ベリタスのVeritas InfoScale Operations ManagerにおけるSQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2026-44923 | 2026-05-25 10:26 | 2026-05-20 | Show | GitHub Exploit DB Packet Storm |
| 3599 | 5.4 |
警告
Network |
ベリタス | Veritas InfoScale Operations Manager | ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2026-44924 | 2026-05-25 10:26 | 2026-05-20 | Show | GitHub Exploit DB Packet Storm |
| 3600 | 8.8 |
重要
Adjacent |
ベリタス | Veritas InfoScale Operations Manager | ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2026-44925 | 2026-05-25 10:26 | 2026-05-20 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 25, 2026, 4:04 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 319311 | 6.1 |
MEDIUM
Network |
outtolunchproductions | simple_headline_rotator | The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin … |
CWE-79
Cross-site Scripting |
CVE-2024-7860 | 2024-09-28 05:56 | 2024-09-12 | Show | GitHub Exploit DB Packet Storm |
| 319312 | 6.1 |
MEDIUM
Network |
michalaugustyniak | misiek_paypal | The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin a… |
CWE-79
Cross-site Scripting |
CVE-2024-7861 | 2024-09-28 05:52 | 2024-09-12 | Show | GitHub Exploit DB Packet Storm |
| 319313 | 5.7 |
MEDIUM
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks. |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2024-7698 | 2024-09-28 04:39 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 319314 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAIL_RELAY_PASSWORD in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43387 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 319315 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAIL_NOTIFICATION.TO in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43386 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 319316 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXY_HTTP_PORT in mGuard devices. |
CWE-78
OS Command |
CVE-2024-43385 | 2024-09-28 04:33 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 319317 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. |
NVD-CWE-noinfo
|
CVE-2024-43388 | 2024-09-28 04:32 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 319318 | 7.1 |
HIGH
Local |
moxa |
mxview_one mxview_one_central_manager |
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensit… |
CWE-312
Cleartext Storage of Sensitive Information |
CVE-2024-6785 | 2024-09-28 03:59 | 2024-09-21 | Show | GitHub Exploit DB Packet Storm |
| 319319 | 8.8 |
HIGH
Network |
phoenixcontact |
tc_mguard_rs4000_4g_vzw_vpn_firmware tc_mguard_rs4000_4g_vpn_firmware tc_mguard_rs4000_4g_att_vpn_firmware tc_mguard_rs4000_3g_vpn_firmware tc_mguard_rs2000_4g_vzw_vpn_firmware tc_mgua… |
An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user data. |
CWE-78
OS Command |
CVE-2024-7699 | 2024-09-28 03:59 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |
| 319320 | 7.8 |
HIGH
Local |
logitech | logi_options\+ | Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuse… |
CWE-94
Code Injection |
CVE-2024-8258 | 2024-09-28 03:56 | 2024-09-10 | Show | GitHub Exploit DB Packet Storm |