Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 9, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 711 | 9.8 |
緊急
Network |
Mercurycom | MIPC252W Firmware | MercurycomのMIPC252W Firmwareにおける認証に関する脆弱性 New |
CWE-287
不適切な認証 |
CVE-2026-35903 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
| 712 | 4.8 |
警告
Network |
Apache Software Foundation | Apache Storm Prometheus Reporter | Apache Software FoundationのApache Storm Prometheus Reporterにおける証明書検証に関する脆弱性 New |
CWE-295
不正な証明書検証 |
CVE-2026-40557 | 2026-05-7 10:53 | 2026-04-27 | Show | GitHub Exploit DB Packet Storm |
| 713 | 8.8 |
重要
Network |
minerva | minerva | Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-5779 | 2026-05-7 10:53 | 2026-04-28 | Show | GitHub Exploit DB Packet Storm |
| 714 | 8.1 |
重要
Network |
minerva | minerva | Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性 New |
CWE-284
不適切なアクセス制御 |
CVE-2026-5780 | 2026-05-7 10:52 | 2026-04-28 | Show | GitHub Exploit DB Packet Storm |
| 715 | 8.8 |
重要
Network |
Frappe | ERPNext | FrappeのERPNextにおけるコードインジェクションの脆弱性 New |
CWE-94
コード・インジェクション |
CVE-2023-54345 | 2026-05-7 10:52 | 2026-05-5 | Show | GitHub Exploit DB Packet Storm |
| 716 | 7.5 |
重要
Network |
OpenEMR | OpenEMR | OpenEMRにおける過度な認証試行の不適切な制限に関する脆弱性 New |
CWE-307
過度な認証試行の不適切な制限 |
CVE-2023-54347 | 2026-05-7 10:52 | 2026-05-5 | Show | GitHub Exploit DB Packet Storm |
| 717 | 7.2 |
重要
Network |
デル | data domain operating system | デルのdata domain operating systemにおける認証に関する脆弱性 New |
CWE-287 CWE-noinfo |
CVE-2025-46607 | 2026-05-7 10:52 | 2026-04-17 | Show | GitHub Exploit DB Packet Storm |
| 718 | 6.6 |
警告
Network |
デル | data domain operating system | デルのdata domain operating systemにおける認証に関する脆弱性 New |
CWE-287
不適切な認証 |
CVE-2025-46641 | 2026-05-7 10:52 | 2026-04-17 | Show | GitHub Exploit DB Packet Storm |
| 719 | 8.8 |
重要
Adjacent |
Android | GoogleのAndroidにおける認証アルゴリズムの不適切な実装に関する脆弱性 New |
CWE-303
認証アルゴリズム上の問題 |
CVE-2026-0073 | 2026-05-7 10:52 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm | |
| 720 | 8 |
重要
Adjacent |
SonicWALL | SonicOS | SonicWALLのSonicOSにおける複数の脆弱性 New |
CWE-1390 CWE-306 |
CVE-2026-0204 | 2026-05-7 10:52 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 9, 2026, 5:07 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 312801 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, … |
CWE-78
OS Command |
CVE-2024-8131 | 2024-08-28 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312802 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-72… |
CWE-78
OS Command |
CVE-2024-8130 | 2024-08-28 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312803 | 8.8 |
HIGH
Network |
catonetworks | cato_client | Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34. |
NVD-CWE-noinfo
|
CVE-2024-6973 | 2024-08-28 00:34 | 2024-08-1 | Show | GitHub Exploit DB Packet Storm |
| 312804 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-… |
CWE-78
OS Command |
CVE-2024-8129 | 2024-08-28 00:33 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312805 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326,… |
CWE-78
OS Command |
CVE-2024-8128 | 2024-08-28 00:32 | 2024-08-24 | Show | GitHub Exploit DB Packet Storm |
| 312806 | 7.8 |
HIGH
Local |
dell | peripheral_manager | Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL … |
CWE-427
Uncontrolled Search Path Element |
CVE-2024-37127 | 2024-08-28 00:23 | 2024-07-31 | Show | GitHub Exploit DB Packet Storm |
| 312807 | 8.8 |
HIGH
Network |
netgear | prosafe_network_management_system | NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installat… |
CWE-89
SQL Injection |
CVE-2024-6814 | 2024-08-28 00:03 | 2024-08-22 | Show | GitHub Exploit DB Packet Storm |
| 312808 | 8.8 |
HIGH
Network |
netgear | prosafe_network_management_system | NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio… |
CWE-89
SQL Injection |
CVE-2024-6813 | 2024-08-28 00:01 | 2024-08-22 | Show | GitHub Exploit DB Packet Storm |
| 312809 | 9.8 |
CRITICAL
Network |
servision | ivg_webmax | Servision - CWE-287: Improper Authentication |
CWE-287
Improper Authentication |
CVE-2024-42336 | 2024-08-27 23:59 | 2024-08-20 | Show | GitHub Exploit DB Packet Storm |
| 312810 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-34… |
CWE-78
OS Command |
CVE-2024-8127 | 2024-08-27 23:53 | 2024-08-24 | Show | GitHub Exploit DB Packet Storm |