Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253741 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル
- 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3175 2011-05-18 10:25 2010-10-19 Show GitHub Exploit DB Packet Storm
253742 2.1 注意 トレンドマイクロ - ウイルスバスター2009 におけるキー入力暗号化機能に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-1327 2011-05-17 11:01 2011-05-17 Show GitHub Exploit DB Packet Storm
253743 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll - North America に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0859 2011-05-17 09:49 2011-04-19 Show GitHub Exploit DB Packet Storm
253744 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0858 2011-05-17 09:48 2011-04-19 Show GitHub Exploit DB Packet Storm
253745 3.5 注意 オラクル - Oracle PeopleSoft Enterprise の Pension Administration コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0857 2011-05-17 09:47 2011-04-20 Show GitHub Exploit DB Packet Storm
253746 3.5 注意 オラクル - Oracle PeopleSoft Enterprise の PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0856 2011-05-17 09:46 2011-04-20 Show GitHub Exploit DB Packet Storm
253747 5.5 警告 オラクル - Oracle Industry Applications の InForm コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0855 2011-05-17 09:45 2011-04-19 Show GitHub Exploit DB Packet Storm
253748 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0854 2011-05-17 09:44 2011-04-19 Show GitHub Exploit DB Packet Storm
253749 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における ePerformance に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0853 2011-05-17 09:43 2011-04-19 Show GitHub Exploit DB Packet Storm
253750 5.5 警告 オラクル - Oracle PeopleSoft Enterprise ELS における Enterprise Learning Mgmt に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0851 2011-05-17 09:41 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5171 6.8 MEDIUM
Adjacent
- - A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with a… CWE-78
OS Command 
CVE-2026-0711 2026-04-28 12:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5172 9.8 CRITICAL
Network
- - A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulati… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7204 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5173 9.8 CRITICAL
Network
- - A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipul… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7203 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5174 9.8 CRITICAL
Network
- - A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWiFiWpsStart of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of th… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7202 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5175 6.8 MEDIUM
Network
- - A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras. CWE-78
OS Command 
CVE-2026-32649 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5176 9.8 CRITICAL
Network
- - Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys. CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-32644 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5177 8.8 HIGH
Network
- - An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras. CWE-122
Heap-based Buffer Overflow
CVE-2026-20766 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5178 5.0 MEDIUM
Adjacent
- - Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3… CWE-295
Improper Certificate Validation 
CVE-2026-40974 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5179 8.8 HIGH
Adjacent
- - Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials. CWE-798
 Use of Hard-coded Credentials
CVE-2026-27785 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5180 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Add validation of the inner IPv4 packet tot_len and ihl fields pa… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-31472 2026-04-28 08:28 2026-04-22 Show GitHub Exploit DB Packet Storm