Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 6, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 931 | 10 |
緊急
Network |
Smallstep | Step CA | SmallstepのStep CAにおける複数の脆弱性 |
CWE-287 CWE-295 CWE-295 |
CVE-2026-30836 | 2026-04-28 10:11 | 2026-03-19 | Show | GitHub Exploit DB Packet Storm |
| 932 | 4.7 |
警告
Local |
GL.iNet | Comet (GL-RM1) Firmware | GL.iNetのComet (GL-RM1) Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 |
CWE-345
データの信頼性についての不十分な検証 |
CVE-2026-32290 | 2026-04-28 10:11 | 2026-03-17 | Show | GitHub Exploit DB Packet Storm |
| 933 | 6.8 |
警告
Physics |
GL.iNet | Comet (GL-RM1) Firmware | GL.iNetのComet (GL-RM1) Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 |
CWE-306
重要な機能に対する認証の欠如 解説 |
CVE-2026-32291 | 2026-04-28 10:11 | 2026-03-17 | Show | GitHub Exploit DB Packet Storm |
| 934 | 7.5 |
重要
Network |
GL.iNet | Comet (GL-RM1) Firmware | GL.iNetのComet (GL-RM1) Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 |
CWE-307
過度な認証試行の不適切な制限 |
CVE-2026-32292 | 2026-04-28 10:11 | 2026-03-17 | Show | GitHub Exploit DB Packet Storm |
| 935 | 3.7 |
低
Network |
GL.iNet | Comet (GL-RM1) Firmware | GL.iNetのComet (GL-RM1) Firmwareにおける証明書検証に関する脆弱性 |
CWE-295
不正な証明書検証 |
CVE-2026-32293 | 2026-04-28 10:11 | 2026-03-17 | Show | GitHub Exploit DB Packet Storm |
| 936 | 6.5 |
警告
Network |
オラクル | PeopleSoft Enterprise FIN Contracts | オラクルのPeopleSoft Enterprise FIN Contractsにおける情報漏えいに関する脆弱性 |
CWE-200
情報漏えい |
CVE-2026-34300 | 2026-04-28 10:11 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 937 | 3.7 |
低
Network |
Smallstep | Step CA | SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性 |
CWE-129
配列インデックスの不適切な検証 |
CVE-2026-40097 | 2026-04-28 10:11 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 938 | 8.2 |
重要
Network |
Saltcorn | Saltcorn | Saltcornにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-40163 | 2026-04-28 10:11 | 2026-04-10 | Show | GitHub Exploit DB Packet Storm |
| 939 | 6.1 |
警告
Network |
AdonisJS |
adonisjs/http-server AdonisJS Core |
AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性 |
CWE-601
オープンリダイレクト |
CVE-2026-40255 | 2026-04-28 10:11 | 2026-04-16 | Show | GitHub Exploit DB Packet Storm |
| 940 | 9.3 |
緊急
Local |
MinecAnton209 | NovumOS | MinecAnton209のNovumOSにおける複数の脆弱性 |
CWE-20 CWE-269 |
CVE-2026-40317 | 2026-04-28 10:11 | 2026-04-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 641 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6528 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 642 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-6529 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 643 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-122
Heap-based Buffer Overflow |
CVE-2026-6530 | 2026-05-2 04:28 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 644 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5409 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 645 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6521 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 646 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6522 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 647 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-6523 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 648 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-824
Access of Uninitialized Pointer |
CVE-2026-6524 | 2026-05-2 04:27 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 649 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5299 | 2026-05-2 04:26 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |
| 650 | 5.5 |
MEDIUM
Local |
wireshark | wireshark | AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
CWE-674
Uncontrolled Recursion |
CVE-2026-5401 | 2026-05-2 04:26 | 2026-04-30 | Show | GitHub Exploit DB Packet Storm |