Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253791 3.6 注意 オラクル - Oracle Solaris における cp の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0801 2011-05-13 11:00 2011-04-19 Show GitHub Exploit DB Packet Storm
253792 6.5 警告 オラクル - Oracle Solaris における Administration Utilities の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0800 2011-05-13 10:58 2011-04-19 Show GitHub Exploit DB Packet Storm
253793 10 危険 サン・マイクロシステムズ - Oracle Sun GlassFish Enterprise Server および Sun Java System Application Server における脆弱性 CWE-noinfo
情報不足
CVE-2011-0807 2011-05-12 11:03 2011-04-19 Show GitHub Exploit DB Packet Storm
253794 2.1 注意 オラクル - Oracle E-Business Suite の Applications Install コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0797 2011-05-12 10:57 2011-04-19 Show GitHub Exploit DB Packet Storm
253795 1.7 注意 オラクル - Oracle E-Business Suite の Applications Install コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0796 2011-05-12 10:56 2011-04-19 Show GitHub Exploit DB Packet Storm
253796 4.3 警告 オラクル - Oracle E-Business Suite の Application Object Library コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0791 2011-05-12 10:56 2011-04-19 Show GitHub Exploit DB Packet Storm
253797 4.3 警告 オラクル - Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0798 2011-05-12 10:46 2011-04-19 Show GitHub Exploit DB Packet Storm
253798 3.5 注意 オラクル - Oracle Fusion Middleware の Single Sign On コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0795 2011-05-12 10:45 2011-04-19 Show GitHub Exploit DB Packet Storm
253799 1.7 注意 オラクル - Oracle Solaris における wbem の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-0790 2011-05-12 10:44 2011-04-19 Show GitHub Exploit DB Packet Storm
253800 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle HTTP Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2011-0789 2011-05-12 10:43 2011-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5171 6.8 MEDIUM
Adjacent
- - A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authenticated, adjacent attacker with a… CWE-78
OS Command 
CVE-2026-0711 2026-04-28 12:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5172 9.8 CRITICAL
Network
- - A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setPptpServerCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulati… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7204 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5173 9.8 CRITICAL
Network
- - A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipul… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7203 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5174 9.8 CRITICAL
Network
- - A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWiFiWpsStart of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of th… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7202 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5175 6.8 MEDIUM
Network
- - A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras. CWE-78
OS Command 
CVE-2026-32649 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5176 9.8 CRITICAL
Network
- - Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys. CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-32644 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5177 8.8 HIGH
Network
- - An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras. CWE-122
Heap-based Buffer Overflow
CVE-2026-20766 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5178 5.0 MEDIUM
Adjacent
- - Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra. Affected: Spring Boot 4.0.0–4.0.5 (fix 4.0.6), 3.5.0–3.5.13 (fix 3… CWE-295
Improper Certificate Validation 
CVE-2026-40974 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5179 8.8 HIGH
Adjacent
- - Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials. CWE-798
 Use of Hard-coded Credentials
CVE-2026-27785 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
5180 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Add validation of the inner IPv4 packet tot_len and ihl fields pa… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-31472 2026-04-28 08:28 2026-04-22 Show GitHub Exploit DB Packet Storm