Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
711 8.8 重要
Network 		Tabby Tabby TabbyにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-45035 2026-05-21 10:55 2026-05-15 Show GitHub Exploit DB Packet Storm
712 7 重要
Local 		Tabby Tabby TabbyにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-45036 2026-05-21 10:55 2026-05-15 Show GitHub Exploit DB Packet Storm
713 7.1 重要
Network 		Tabby Tabby Tabbyにおける複数の脆弱性 CWE-184
CWE-601
CVE-2026-45037 2026-05-21 10:55 2026-05-15 Show GitHub Exploit DB Packet Storm
714 7.8 重要
Local 		Tabby Tabby Tabbyにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化 		CVE-2026-45038 2026-05-21 10:54 2026-05-15 Show GitHub Exploit DB Packet Storm
715 9.8 緊急
Network 		Zeit, Inc. Turborepo Vercel, Inc. (旧 Zeit, Inc.)のTurborepoにおける信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2026-45772 2026-05-21 10:54 2026-05-15 Show GitHub Exploit DB Packet Storm
716 6.5 警告
Network 		Zeit, Inc. Turborepo Vercel, Inc. (旧 Zeit, Inc.)のTurborepoにおける複数の脆弱性 CWE-352
CWE-384
CVE-2026-45773 2026-05-21 10:54 2026-05-15 Show GitHub Exploit DB Packet Storm
717 7.8 重要
Local 		Zeit, Inc. The Turborepo Language Server Protocol (LSP) Vercel, Inc. (旧 Zeit, Inc.)のThe Turborepo Language Server Protocol (LSP)におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-46508 2026-05-21 10:54 2026-05-15 Show GitHub Exploit DB Packet Storm
718 9.1 緊急
Network 		FreeRTOS coreMQTT FreeRTOSのcoreMQTTにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-8686 2026-05-21 10:54 2026-05-15 Show GitHub Exploit DB Packet Storm
719 9.1 緊急
Network 		Aden OpenHive AdenのOpenHiveにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-8757 2026-05-21 10:54 2026-05-17 Show GitHub Exploit DB Packet Storm
720 6.5 警告
Network 		Kilo Code Kilo Code Kilo Codeにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-8765 2026-05-21 10:54 2026-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2031 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setWiFiWpsCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. … CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9434 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2032 9.8 CRITICAL
Network 		- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setQosCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Perfor… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9435 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2033 9.8 CRITICAL
Network 		- - A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Execut… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9436 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2034 9.8 CRITICAL
Network 		- - A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setOpenVpnCertGenerationCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Int… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9454 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2035 9.8 CRITICAL
Network 		- - A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. T… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9455 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2036 9.8 CRITICAL
Network 		- - A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setOpenVpnCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation … CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9456 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2037 9.8 CRITICAL
Network 		- - A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of the component Web Management Interf… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9457 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2038 9.8 CRITICAL
Network 		- - A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9458 2026-05-27 03:59 2026-05-25 Show GitHub Exploit DB Packet Storm
2039 6.3 MEDIUM
Network 		- - A security flaw has been discovered in Totolink CA750-PoE 6.2c.510. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performin… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9512 2026-05-27 03:59 2026-05-26 Show GitHub Exploit DB Packet Storm
2040 6.3 MEDIUM
Network 		- - A weakness has been identified in Totolink CA750-PoE 6.2c.510. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulat… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9513 2026-05-27 03:59 2026-05-26 Show GitHub Exploit DB Packet Storm