Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 3, 2026, 6:08 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3651 | 8.8 |
重要
Network |
SailPoint Technologies Holdings, Inc. | IdentityIQ | SailPoint Technologies Holdings, Inc.のIdentityIQにおける不正な認証に関する脆弱性 |
CWE-863
不正な認証 |
CVE-2026-5712 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 3652 | 5.5 |
警告
Local |
Canonical | pdfunite | Canonicalのpdfuniteにおける古典的バッファオーバーフローの脆弱性 |
CWE-120
古典的バッファオーバーフロー |
CVE-2018-25306 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 3653 | 9.8 |
緊急
Network |
Kvcache-ai | Ktransformers | Kvcache-aiのKtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 |
CWE-502
信頼性のないデータのデシリアライゼーション |
CVE-2026-26210 | 2026-05-7 10:53 | 2026-04-23 | Show | GitHub Exploit DB Packet Storm |
| 3654 | 7.1 |
重要
Local |
デル | Dell/Alienware Purchased Apps | デルのDell/Alienware Purchased Appsにおけるリンク解釈に関する脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2026-27105 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 3655 | 7.8 |
重要
Local |
entechtaiwan | TViPort | entechtaiwanのTViPortにおける複数の脆弱性 |
CWE-20 CWE-269 |
CVE-2026-30769 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 3656 | 5.9 |
警告
Network |
Elasticsearch B.V. | Elastic Package Registry | Elasticsearch B.V.のElastic Package Registryにおけるデジタル署名の検証に関する脆弱性 |
CWE-347
デジタル署名の不適切な検証 |
CVE-2026-33467 | 2026-05-7 10:53 | 2026-04-28 | Show | GitHub Exploit DB Packet Storm |
| 3657 | 4.4 |
警告
Local |
Mercurycom | MIPC252W Firmware | MercurycomのMIPC252W Firmwareにおけるリソースの枯渇に関する脆弱性 |
CWE-400
リソースの枯渇 |
CVE-2026-35901 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
| 3658 | 6.2 |
警告
Local |
Mercurycom | MIPC252W Firmware | MercurycomのMIPC252W Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 |
CWE-307
過度な認証試行の不適切な制限 |
CVE-2026-35902 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
| 3659 | 9.8 |
緊急
Network |
Mercurycom | MIPC252W Firmware | MercurycomのMIPC252W Firmwareにおける認証に関する脆弱性 |
CWE-287
不適切な認証 |
CVE-2026-35903 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
| 3660 | 4.8 |
警告
Network |
Apache Software Foundation | Apache Storm Prometheus Reporter | Apache Software FoundationのApache Storm Prometheus Reporterにおける証明書検証に関する脆弱性 |
CWE-295
不正な証明書検証 |
CVE-2026-40557 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 3, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 313831 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2022_23h2 windows_server_2022 windows_server_2019 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43592 | 2024-10-23 04:30 | 2024-10-9 | Show | GitHub Exploit DB Packet Storm |
| 313832 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2022_23h2 windows_server_2022 windows_server_2019 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43589 | 2024-10-23 04:29 | 2024-10-9 | Show | GitHub Exploit DB Packet Storm |
| 313833 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2022_23h2 windows_server_2022 windows_server_2019 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43453 | 2024-10-23 04:29 | 2024-10-9 | Show | GitHub Exploit DB Packet Storm |
| 313834 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2022_23h2 windows_server_2022 windows_server_2019 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43607 | 2024-10-23 04:03 | 2024-10-9 | Show | GitHub Exploit DB Packet Storm |
| 313835 | 8.8 |
HIGH
Network |
microsoft |
windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2022_23h2 windows_server_2022 windows_server_2019 |
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
NVD-CWE-noinfo
|
CVE-2024-43608 | 2024-10-23 03:58 | 2024-10-9 | Show | GitHub Exploit DB Packet Storm |
| 313836 | 5.4 |
MEDIUM
Network |
phpgurukul | hospital_management_system | PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php. |
CWE-79
Cross-site Scripting |
CVE-2024-46237 | 2024-10-23 03:35 | 2024-10-9 | Show | GitHub Exploit DB Packet Storm |
| 313837 | 6.0 |
MEDIUM
Local |
cisco |
ata_191_firmware ata_192_firmware |
A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root u… |
CWE-78
OS Command |
CVE-2024-20461 | 2024-10-23 03:26 | 2024-10-17 | Show | GitHub Exploit DB Packet Storm |
| 313838 | 5.4 |
MEDIUM
Network |
code-projects | blood_bank_system | A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /viewrequest.php. The manipulation leads to cr… |
CWE-79
Cross-site Scripting |
CVE-2024-10142 | 2024-10-23 03:11 | 2024-10-20 | Show | GitHub Exploit DB Packet Storm |
| 313839 | 8.8 |
HIGH
Network |
esafenet | cdg | A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is the function connectLogout of the file /com/esafenet/servlet/ajax/MultiServerAjax.java. The manipulat… |
CWE-89
SQL Injection |
CVE-2024-10134 | 2024-10-23 03:10 | 2024-10-19 | Show | GitHub Exploit DB Packet Storm |
| 313840 | 8.8 |
HIGH
Network |
esafenet | cdg | A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPol… |
CWE-89
SQL Injection |
CVE-2024-10133 | 2024-10-23 03:10 | 2024-10-19 | Show | GitHub Exploit DB Packet Storm |