Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251851 10 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行されるの脆弱性 CWE-119
バッファエラー
CVE-2011-2953 2011-09-12 09:40 2011-08-16 Show GitHub Exploit DB Packet Storm
251852 4 警告 libvirt.org
レッドハット
- libvirt における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-2511 2011-09-12 09:03 2011-07-21 Show GitHub Exploit DB Packet Storm
251853 6.4 警告 きゅー - Megalith における認証回避の脆弱性 CWE-287
不適切な認証
CVE-2011-2671 2011-09-9 12:01 2011-09-9 Show GitHub Exploit DB Packet Storm
251854 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-2952 2011-09-9 10:08 2011-08-16 Show GitHub Exploit DB Packet Storm
251855 9.3 危険 リアルネットワークス - RealNetworks RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2951 2011-09-9 10:08 2011-08-16 Show GitHub Exploit DB Packet Storm
251856 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の qcpfformat.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2950 2011-09-9 10:07 2011-08-16 Show GitHub Exploit DB Packet Storm
251857 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer Enterprise におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2949 2011-09-9 10:06 2011-08-16 Show GitHub Exploit DB Packet Storm
251858 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2948 2011-09-9 10:05 2011-08-16 Show GitHub Exploit DB Packet Storm
251859 3.7 注意 オラクル - Oracle VM VirtualBox における Guest Additions for Windows の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-2300 2011-09-9 09:57 2011-07-19 Show GitHub Exploit DB Packet Storm
251860 6.2 警告 オラクル - Oracle VM VirtualBox の脆弱性 CWE-noinfo
情報不足
CVE-2011-2305 2011-09-9 09:54 2011-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3951 9.8 CRITICAL
Network
- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipula… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7137 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3952 9.8 CRITICAL
Network
- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7138 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3953 4.3 MEDIUM
Network
- - An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL. CWE-601
Open Redirect
CVE-2026-30346 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3954 4.3 MEDIUM
Network
- - A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal. CWE-22
Path Traversal
CVE-2026-30462 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3955 8.8 HIGH
Network
- - Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the public/setting… CWE-352
 Origin Validation Error
CVE-2026-38934 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3956 6.1 MEDIUM
Network
- - A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameter CWE-79
Cross-site Scripting
CVE-2026-38935 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3957 6.1 MEDIUM
Network
- - A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameter CWE-79
Cross-site Scripting
CVE-2026-38936 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3958 9.8 CRITICAL
Network
- - A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the … CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7139 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3959 9.8 CRITICAL
Network
- - A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the arg… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7140 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
3960 5.4 MEDIUM
Network
- - A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of the component Invit… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-7145 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm