|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 9, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 741 | 7.1 |
重要
Network |
Apache Software Foundation | Apache Atlas | Apache Software FoundationのApache Atlasにおけるコードインジェクションの脆弱性 New |
CWE-94
コード・インジェクション |
CVE-2026-40563 | 2026-05-7 10:51 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 742 | 8.8 |
重要
Adjacent |
Espressif Systems | ESP32 Arduino | Espressif SystemsのESP32 Arduinoにおけるスタックベースのバッファオーバーフローの脆弱性 New |
CWE-121
スタックオーバーフロー |
CVE-2026-41429 | 2026-05-7 10:51 | 2026-04-24 | Show | GitHub Exploit DB Packet Storm |
| 743 | 9 |
緊急
Network |
Jenkins プロジェクト | GitHub | JenkinsのGitHubにおけるクロスサイトスクリプティングの脆弱性 New |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-42523 | 2026-05-7 10:51 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 744 | 8 |
重要
Network |
Jenkins プロジェクト | HTML Publisher Plugin | JenkinsのHTML Publisher Pluginにおけるクロスサイトスクリプティングの脆弱性 New |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2026-42524 | 2026-05-7 10:51 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 745 | 4.3 |
警告
Network |
Jenkins プロジェクト | Azure AD | JenkinsのAzure ADにおけるオープンリダイレクトの脆弱性 New |
CWE-601
オープンリダイレクト |
CVE-2026-42525 | 2026-05-7 10:51 | 2026-04-29 | Show | GitHub Exploit DB Packet Storm |
| 746 | 8.8 |
重要
Adjacent |
TP-LINK Technologies | TL-WR841N ファームウェア | TP-LINK TechnologiesのTL-WR841N ファームウェアにおけるデフォルトの暗号鍵の使用に関する脆弱性 New |
CWE-1394
デフォルトの暗号鍵の使用 |
CVE-2026-5039 | 2026-05-7 10:51 | 2026-04-23 | Show | GitHub Exploit DB Packet Storm |
| 747 | 7.3 |
重要
Network |
GNU Project | GNU C Library | GNU ProjectのGNU C Libraryにおける境界外書き込みに関する脆弱性 New |
CWE-787
境界外書き込み |
CVE-2026-5435 | 2026-05-7 10:51 | 2026-04-28 | Show | GitHub Exploit DB Packet Storm |
| 748 | 7.5 |
重要
Network |
Progress Software Corporation | Telerik UI for ASP.NET AJAX | Progress Software CorporationのTelerik UI for ASP.NET AJAXにおけるリソースの枯渇に関する脆弱性 New |
CWE-400
リソースの枯渇 |
CVE-2026-6022 | 2026-05-7 10:51 | 2026-04-22 | Show | GitHub Exploit DB Packet Storm |
| 749 | 9.8 |
緊急
Network |
Progress Software Corporation | Telerik UI for ASP.NET AJAX | Progress Software CorporationのTelerik UI for ASP.NET AJAXにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New |
CWE-502
信頼性のないデータのデシリアライゼーション |
CVE-2026-6023 | 2026-05-7 10:51 | 2026-04-22 | Show | GitHub Exploit DB Packet Storm |
| 750 | 2.7 |
低
Network |
Tanium | Tanium Server | TaniumのTanium Serverにおける認証情報の不十分な保護に関する脆弱性 New |
CWE-522
認証情報の不十分な保護 |
CVE-2026-6408 | 2026-05-7 10:51 | 2026-04-22 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 9, 2026, 5:07 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 312801 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, … |
CWE-78
OS Command |
CVE-2024-8131 | 2024-08-28 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312802 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-72… |
CWE-78
OS Command |
CVE-2024-8130 | 2024-08-28 00:34 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312803 | 8.8 |
HIGH
Network |
catonetworks | cato_client | Remote Code Execution in Cato Windows SDP client via crafted URLs. This issue affects Windows SDP Client before 5.10.34. |
NVD-CWE-noinfo
|
CVE-2024-6973 | 2024-08-28 00:34 | 2024-08-1 | Show | GitHub Exploit DB Packet Storm |
| 312804 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-… |
CWE-78
OS Command |
CVE-2024-8129 | 2024-08-28 00:33 | 2024-08-25 | Show | GitHub Exploit DB Packet Storm |
| 312805 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326,… |
CWE-78
OS Command |
CVE-2024-8128 | 2024-08-28 00:32 | 2024-08-24 | Show | GitHub Exploit DB Packet Storm |
| 312806 | 7.8 |
HIGH
Local |
dell | peripheral_manager | Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL … |
CWE-427
Uncontrolled Search Path Element |
CVE-2024-37127 | 2024-08-28 00:23 | 2024-07-31 | Show | GitHub Exploit DB Packet Storm |
| 312807 | 8.8 |
HIGH
Network |
netgear | prosafe_network_management_system | NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installat… |
CWE-89
SQL Injection |
CVE-2024-6814 | 2024-08-28 00:03 | 2024-08-22 | Show | GitHub Exploit DB Packet Storm |
| 312808 | 8.8 |
HIGH
Network |
netgear | prosafe_network_management_system | NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio… |
CWE-89
SQL Injection |
CVE-2024-6813 | 2024-08-28 00:01 | 2024-08-22 | Show | GitHub Exploit DB Packet Storm |
| 312809 | 9.8 |
CRITICAL
Network |
servision | ivg_webmax | Servision - CWE-287: Improper Authentication |
CWE-287
Improper Authentication |
CVE-2024-42336 | 2024-08-27 23:59 | 2024-08-20 | Show | GitHub Exploit DB Packet Storm |
| 312810 | 9.8 |
CRITICAL
Network |
dlink |
dns-1550-04_firmware dns-1200-05_firmware dns-1100-4_firmware dns-726-4_firmware dns-345_firmware dns-343_firmware dns-340l_firmware dnr-326_firmware dns-327l_firmware dns-… |
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-34… |
CWE-78
OS Command |
CVE-2024-8127 | 2024-08-27 23:53 | 2024-08-24 | Show | GitHub Exploit DB Packet Storm |