Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190331 7.5 重要
Network 		GNU Project - bash における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2016-0634 2017-09-28 16:49 2016-09-20 Show GitHub Exploit DB Packet Storm
190332 5.3 警告
Network 		D-Link Systems, Inc. - D-Link DNS-320L および DNS-327L のファームウェアにおける情報漏えいに関する脆弱性 CWE-200
CWE-287
CVE-2014-7860 2017-09-28 16:07 2014-10-3 Show GitHub Exploit DB Packet Storm
190333 9.8 緊急
Network 		D-Link Systems, Inc. - 複数の D-Link 製品のファームウェアにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2014-7859 2017-09-28 16:07 2014-10-3 Show GitHub Exploit DB Packet Storm
190334 9.8 緊急
Network 		D-Link Systems, Inc. - D-Link DNR-326 ファームウェアにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2014-7858 2017-09-28 16:07 2014-10-3 Show GitHub Exploit DB Packet Storm
190335 9.8 緊急
Network 		D-Link Systems, Inc. - 複数の D-Link 製品のファームウェアにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2014-7857 2017-09-28 16:07 2014-10-3 Show GitHub Exploit DB Packet Storm
190336 8.8 重要
Network 		pysvn - svn-workbench における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2015-0853 2017-09-28 15:52 2015-09-14 Show GitHub Exploit DB Packet Storm
190337 5.5 警告
Local 		MP3Gain - MP3Gain におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-12912 2017-09-28 15:46 2017-09-7 Show GitHub Exploit DB Packet Storm
190338 5.5 警告
Local 		MP3Gain - MP3Gain におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-12911 2017-09-28 15:46 2017-09-7 Show GitHub Exploit DB Packet Storm
190339 6.1 警告
Network 		Palo Alto Networks - Palo Alto Networks PAN-OS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12416 2017-09-28 15:46 2017-08-31 Show GitHub Exploit DB Packet Storm
190340 7.5 重要
Network 		ldapauth-fork project - ldapauth-fork における LDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2015-7294 2017-09-28 15:46 2015-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 4.9 MEDIUM
Network 		- - Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with adm… New CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2024-47269 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
202 2.7 LOW
Network 		- - Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administra… New CWE-281
 Improper Preservation of Permissions 		CVE-2024-47270 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
203 4.9 MEDIUM
Network 		- - Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privi… New CWE-522
 Insufficiently Protected Credentials 		CVE-2024-47271 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
204 2.7 LOW
Network 		- - Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to … New CWE-863
 Incorrect Authorization 		CVE-2024-47272 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
205 5.9 MEDIUM
Network 		- - Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authenticated users with admi… New CWE-79
Cross-site Scripting 		CVE-2025-10466 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
206 5.4 MEDIUM
Network 		- - Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users … New CWE-79
Cross-site Scripting 		CVE-2025-13167 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
207 8.1 HIGH
Network 		- - Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) allows remote atta… New CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2025-13392 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
208 6.1 MEDIUM
Local 		- - Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content when installing. New CWE-346
 Origin Validation Error 		CVE-2025-13593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
209 7.5 HIGH
Network 		- - An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. New CWE-749
 Exposed Dangerous Method or Function 		CVE-2025-14713 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
210 8.6 HIGH
Network 		- - A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. New CWE-89
SQL Injection 		CVE-2025-30028 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm