Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 9, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 701 | 9.8 |
緊急
Network |
Synway | SMG Gateway Management Software | SynwayのSMG Gateway Management SoftwareにおけるOS コマンドインジェクションの脆弱性 New |
CWE-78
OSコマンド・インジェクション |
CVE-2025-71284 | 2026-05-7 10:53 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 702 | 7.8 |
重要
Local |
KDE project | KCoreAddons | KDE projectのKCoreAddonsにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 New |
CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化 |
CVE-2026-41526 | 2026-05-7 10:53 | 2026-04-28 | Show | GitHub Exploit DB Packet Storm |
| 703 | 8.8 |
重要
Network |
SailPoint Technologies Holdings, Inc. | IdentityIQ | SailPoint Technologies Holdings, Inc.のIdentityIQにおける不正な認証に関する脆弱性 New |
CWE-863
不正な認証 |
CVE-2026-5712 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 704 | 5.5 |
警告
Local |
Canonical | pdfunite | Canonicalのpdfuniteにおける古典的バッファオーバーフローの脆弱性 New |
CWE-120
古典的バッファオーバーフロー |
CVE-2018-25306 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 705 | 9.8 |
緊急
Network |
Kvcache-ai | Ktransformers | Kvcache-aiのKtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New |
CWE-502
信頼性のないデータのデシリアライゼーション |
CVE-2026-26210 | 2026-05-7 10:53 | 2026-04-23 | Show | GitHub Exploit DB Packet Storm |
| 706 | 7.1 |
重要
Local |
デル | Dell/Alienware Purchased Apps | デルのDell/Alienware Purchased Appsにおけるリンク解釈に関する脆弱性 New |
CWE-59
リンク解釈の問題 |
CVE-2026-27105 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 707 | 7.8 |
重要
Local |
entechtaiwan | TViPort | entechtaiwanのTViPortにおける複数の脆弱性 New |
CWE-20 CWE-269 |
CVE-2026-30769 | 2026-05-7 10:53 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 708 | 5.9 |
警告
Network |
Elasticsearch B.V. | Elastic Package Registry | Elasticsearch B.V.のElastic Package Registryにおけるデジタル署名の検証に関する脆弱性 New |
CWE-347
デジタル署名の不適切な検証 |
CVE-2026-33467 | 2026-05-7 10:53 | 2026-04-28 | Show | GitHub Exploit DB Packet Storm |
| 709 | 4.4 |
警告
Local |
Mercurycom | MIPC252W Firmware | MercurycomのMIPC252W Firmwareにおけるリソースの枯渇に関する脆弱性 New |
CWE-400
リソースの枯渇 |
CVE-2026-35901 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
| 710 | 6.2 |
警告
Local |
Mercurycom | MIPC252W Firmware | MercurycomのMIPC252W Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 New |
CWE-307
過度な認証試行の不適切な制限 |
CVE-2026-35902 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 9, 2026, 5:07 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 312801 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, … |
CWE-78
OS Command |
CVE-2024-8131 | 2024-08-28 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312802 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-72… |
CWE-78
OS Command |
CVE-2024-8130 | 2024-08-28 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312803 | 8.8 |
HIGH
Network |
catonetworks | cato_client | Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34. |
NVD-CWE-noinfo
|
CVE-2024-6973 | 2024-08-28 00:34 | 2024-08-1 | Show | GitHub Exploit DB Packet Storm |
| 312804 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-… |
CWE-78
OS Command |
CVE-2024-8129 | 2024-08-28 00:33 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312805 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326,… |
CWE-78
OS Command |
CVE-2024-8128 | 2024-08-28 00:32 | 2024-08-24 | Show | GitHub Exploit DB Packet Storm |
| 312806 | 7.8 |
HIGH
Local |
dell | peripheral_manager | Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL … |
CWE-427
Uncontrolled Search Path Element |
CVE-2024-37127 | 2024-08-28 00:23 | 2024-07-31 | Show | GitHub Exploit DB Packet Storm |
| 312807 | 8.8 |
HIGH
Network |
netgear | prosafe_network_management_system | NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installat… |
CWE-89
SQL Injection |
CVE-2024-6814 | 2024-08-28 00:03 | 2024-08-22 | Show | GitHub Exploit DB Packet Storm |
| 312808 | 8.8 |
HIGH
Network |
netgear | prosafe_network_management_system | NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio… |
CWE-89
SQL Injection |
CVE-2024-6813 | 2024-08-28 00:01 | 2024-08-22 | Show | GitHub Exploit DB Packet Storm |
| 312809 | 9.8 |
CRITICAL
Network |
servision | ivg_webmax | Servision - CWE-287: Improper Authentication |
CWE-287
Improper Authentication |
CVE-2024-42336 | 2024-08-27 23:59 | 2024-08-20 | Show | GitHub Exploit DB Packet Storm |
| 312810 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-34… |
CWE-78
OS Command |
CVE-2024-8127 | 2024-08-27 23:53 | 2024-08-24 | Show | GitHub Exploit DB Packet Storm |