Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2191 6.1 警告
Network
angeljudesuarez society management system Angel Jude Reyes Suarezのsociety management systemにおける複数の脆弱性 CWE-79
CWE-94
CVE-2026-1135 2026-02-6 10:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2192 8.8 重要
Network
Shanghai UTT Technologies Co., Ltd. 520W ファームウェア Shanghai UTT Technologies Co., Ltd.の520W ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-1137 2026-02-6 10:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2193 8.8 重要
Network
Shanghai UTT Technologies Co., Ltd. 520W ファームウェア Shanghai UTT Technologies Co., Ltd.の520W ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-1138 2026-02-6 10:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2194 8.8 重要
Network
Shanghai UTT Technologies Co., Ltd. 520W ファームウェア Shanghai UTT Technologies Co., Ltd.の520W ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-1139 2026-02-6 10:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2195 8.8 重要
Network
Shanghai UTT Technologies Co., Ltd. 520W ファームウェア Shanghai UTT Technologies Co., Ltd.の520W ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-1140 2026-02-6 10:37 2026-01-19 Show GitHub Exploit DB Packet Storm
2196 5.4 警告
Network
Django Software Foundation Django Django Software FoundationのDjangoにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-1207 2026-02-6 10:37 2026-02-3 Show GitHub Exploit DB Packet Storm
2197 7.5 重要
Network
Django Software Foundation Django Django Software FoundationのDjangoにおけるアルゴリズムの複雑さに関する脆弱性 CWE-407
アルゴリズムの複雑性
CVE-2026-1285 2026-02-6 10:37 2026-02-3 Show GitHub Exploit DB Packet Storm
2198 5.4 警告
Network
Django Software Foundation Django Django Software FoundationのDjangoにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-1287 2026-02-6 10:37 2026-02-3 Show GitHub Exploit DB Packet Storm
2199 5.4 警告
Network
Django Software Foundation Django Django Software FoundationのDjangoにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-1312 2026-02-6 10:37 2026-02-3 Show GitHub Exploit DB Packet Storm
2200 3.1
Network
GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-1751 2026-02-6 10:37 2026-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
611 9.8 CRITICAL
Network
- - Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability allows an attacker to run system commands on the underlyin… CWE-94
Code Injection
CVE-2026-38992 2026-05-1 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
612 7.5 HIGH
Network
- - U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-36959 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
613 7.5 HIGH
Network
- - A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management in… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-36958 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
614 7.5 HIGH
Network
- - Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent … CWE-400
 Uncontrolled Resource Consumption
CVE-2026-36957 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
615 8.8 HIGH
Network
- - A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanism… CWE-352
 Origin Validation Error
CVE-2026-36956 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
616 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34998 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
617 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34997 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
618 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34996 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
619 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34995 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
620 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34994 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm