Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4821 8.8 重要
Network
Nozomi Networks Inc. Guardian HederaのGuardianにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2026-39911 2026-04-23 10:16 2026-04-9 Show GitHub Exploit DB Packet Storm
4822 7.5 重要
Network
Eugene Pankov Ajenti Plugin Core Eugene PankovのAjenti Plugin Coreにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-40177 2026-04-23 10:16 2026-04-10 Show GitHub Exploit DB Packet Storm
4823 5.9 警告
Network
Eugene Pankov Ajenti Plugin Core Eugene PankovのAjenti Plugin Coreにおける複数の脆弱性 CWE-287
CWE-362
CVE-2026-40178 2026-04-23 10:16 2026-04-10 Show GitHub Exploit DB Packet Storm
4824 5.3 警告
Network
Maurice (mauriceboe) trek Maurice (mauriceboe)のtrekにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-40184 2026-04-23 10:16 2026-04-10 Show GitHub Exploit DB Packet Storm
4825 6.5 警告
Network
Maurice (mauriceboe) trek Maurice (mauriceboe)のtrekにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-40185 2026-04-23 10:16 2026-04-10 Show GitHub Exploit DB Packet Storm
4826 6.5 警告
Network
Stig (stigtsp) Net::CIDR::Lite Stig (stigtsp)のNet::CIDR::Liteにおけるレングスパラメーターの不整合による処理に関する脆弱性 CWE-130
レングスパラメーターの不整合による不適切な処理
CVE-2026-40198
CVE-2026-40199
2026-04-23 10:16 2026-04-10 Show GitHub Exploit DB Packet Storm
4827 6.5 警告
Network
Arcane Arcane GetarcaneのArcaneにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-40242 2026-04-23 10:16 2026-04-10 Show GitHub Exploit DB Packet Storm
4828 6.4 警告
Network
runZero runZero Platform runZeroのrunZero PlatformにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-5372 2026-04-23 10:16 2026-04-7 Show GitHub Exploit DB Packet Storm
4829 8.4 重要
Network
runZero runZero Platform runZeroのrunZero Platformにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-5373 2026-04-23 10:16 2026-04-7 Show GitHub Exploit DB Packet Storm
4830 5.8 警告
Network
runZero runZero Platform runZeroのrunZero Platformにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5374 2026-04-23 10:16 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 4.9 MEDIUM
Network
- - Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with adm… New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2024-47269 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
202 2.7 LOW
Network
- - Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administra… New CWE-281
 Improper Preservation of Permissions
CVE-2024-47270 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
203 4.9 MEDIUM
Network
- - Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privi… New CWE-522
 Insufficiently Protected Credentials
CVE-2024-47271 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
204 2.7 LOW
Network
- - Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to … New CWE-863
 Incorrect Authorization
CVE-2024-47272 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
205 5.9 MEDIUM
Network
- - Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authenticated users with admi… New CWE-79
Cross-site Scripting
CVE-2025-10466 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
206 5.4 MEDIUM
Network
- - Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users … New CWE-79
Cross-site Scripting
CVE-2025-13167 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
207 8.1 HIGH
Network
- - Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) allows remote atta… New CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2025-13392 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
208 6.1 MEDIUM
Local
- - Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content when installing. New CWE-346
 Origin Validation Error
CVE-2025-13593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
209 7.5 HIGH
Network
- - An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. New CWE-749
 Exposed Dangerous Method or Function
CVE-2025-14713 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
210 8.6 HIGH
Network
- - A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. New CWE-89
SQL Injection
CVE-2025-30028 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm