Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
921 3.7 低
Network 		Cesanta Mongoose CesantaのMongooseにおける複数の脆弱性 CWE-345
CWE-347
CVE-2026-6986 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
922 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. HG10 Firmware Shenzhen Tenda Technology Co.,Ltd.のHG10 Firmwareにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6988 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
923 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F453 Firmware Shenzhen Tenda Technology Co.,Ltd.のF453 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-6989 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
924 7.2 重要
Network 		シスコシステムズ (Linksys) mr9600 ファームウェア Linksysのmr9600 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-6992 2026-05-1 10:41 2026-04-25 Show GitHub Exploit DB Packet Storm
925 4.8 警告
Network 		D-Link Systems, Inc. DSL-2740R ファームウェア D-Link CorporationのDSL-2740R ファームウェアにおける複数の脆弱性 CWE-79
CWE-94
CVE-2026-7027 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
926 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のFH1202 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7034 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
927 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. FH1202 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のFH1202 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7035 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
928 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. i9 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のi9 ファームウェアにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-7036 2026-05-1 10:41 2026-04-26 Show GitHub Exploit DB Packet Storm
929 7.3 重要
Network 		D-Link Systems, Inc. DIR-822 ファームウェア D-Link CorporationのDIR-822 ファームウェアにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7067 2026-05-1 10:41 2026-04-27 Show GitHub Exploit DB Packet Storm
930 8.8 重要
Adjacent 		ディーリンクジャパン株式会社 dir-825 ファームウェア D-Link CorporationのDIR-825 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7068 2026-05-1 10:41 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313331 4.8 MEDIUM
Network 		fastadmin fastadmin A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the file /[admins_url].php/general/attachment/edit/ids/4?dialog=… CWE-79
Cross-site Scripting 		CVE-2024-7453 2024-08-21 00:50 2024-08-4 Show GitHub Exploit DB Packet Storm
313332 - - - CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause a crash of the Accutech Manager when receiving a specially crafted request over p… CWE-120
Classic Buffer Overflow 		CVE-2024-6918 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313333 - - - A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges. - CVE-2024-42578 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313334 - - - School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php. - CVE-2024-42571 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313335 - - - Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php. - CVE-2024-42561 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313336 - - - Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the room_type parameter at admin_room_added.php. - CVE-2024-42554 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313337 - - - Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where improper input validation can lead to denial of service which may result in servi… - CVE-2024-25009 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313338 6.4 MEDIUM
Network 		- - The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘close_text’ parameter in… - CVE-2024-7054 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313339 - - - Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 (EOL) allows local users to escalate privilege… - CVE-2024-28829 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm
313340 - - - This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bamboo Data Center and Server. This RCE (Rem… - CVE-2024-21689 2024-08-21 00:44 2024-08-20 Show GitHub Exploit DB Packet Storm