Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1111 8.1 重要
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows パフォーマンス モニターのリモート コード実行に対する脆弱性 CWE-191
整数アンダーフロー
CVE-2026-42981 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
1112 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows DWM Core ライブラリの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-42983 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
1113 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Microsoft Graphics コンポーネントの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-42986 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
1114 8.1 重要
Network
マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microso…
Windows 展開サービス (WDS) のリモート コード実行 CWE-416
解放済みメモリの使用
CVE-2026-42987 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
1115 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Winlogon の特権の昇格の脆弱性 CWE-59
リンク解釈の問題
CVE-2026-42989 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
1116 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-42991 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
1117 6.5 警告
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-43951 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
1118 5.5 警告
Local
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-44119 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
1119 7.3 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード
CVE-2026-44185 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
1120 7.3 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける無限ループに関する脆弱性 CWE-835
無限ループ
CVE-2026-44186 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320491 6.7 MEDIUM
Local
- - An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execu… - CVE-2024-45105 2024-09-14 20:47 2024-09-14 Show GitHub Exploit DB Packet Storm
320492 6.8 MEDIUM
Network
- - A privilege escalation vulnerability was discovered when Single Sign On (SSO) is enabled that could allow an attacker to intercept a valid, authenticated LXCA user’s XCC session if they can convince … - CVE-2024-45101 2024-09-14 20:47 2024-09-14 Show GitHub Exploit DB Packet Storm
320493 - - - A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code. - CVE-2024-3100 2024-09-14 20:47 2024-09-14 Show GitHub Exploit DB Packet Storm
320494 - - - The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execu… CWE-384
 Session Fixation
CVE-2024-45368 2024-09-14 20:47 2024-09-14 Show GitHub Exploit DB Packet Storm
320495 - - - The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to ma… - CVE-2024-43099 2024-09-14 20:47 2024-09-14 Show GitHub Exploit DB Packet Storm
320496 7.5 HIGH
Network
fastadmin fastadmin A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipula… CWE-22
Path Traversal
CVE-2024-7928 2024-09-14 06:33 2024-08-20 Show GitHub Exploit DB Packet Storm
320497 9.8 CRITICAL
Network
eyecix jobsearch_wp_job_board Deserialization of Untrusted Data vulnerability in eyecix JobSearch allows Object Injection.This issue affects JobSearch: from n/a through 2.5.3. CWE-502
 Deserialization of Untrusted Data
CVE-2024-43931 2024-09-14 06:22 2024-08-30 Show GitHub Exploit DB Packet Storm
320498 5.4 MEDIUM
Network
qnap notes_station_3 A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We hav… CWE-79
Cross-site Scripting
CVE-2024-27122 2024-09-14 06:16 2024-09-7 Show GitHub Exploit DB Packet Storm
320499 5.3 MEDIUM
Network
- - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-40430 2024-09-14 06:15 2024-07-22 Show GitHub Exploit DB Packet Storm
320500 8.8 HIGH
Network
qnap qts
quts_hero
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTSclou… CWE-78
OS Command 
CVE-2023-34974 2024-09-14 06:14 2024-09-7 Show GitHub Exploit DB Packet Storm