Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 12:02 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1111 7.5 重要
Network
Django Software Foundation daphne Django Software Foundationのdaphneにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44545 2026-06-16 13:40 2026-06-3 Show GitHub Exploit DB Packet Storm
1112 5.3 警告
Network
Django Software Foundation daphne Django Software FoundationのdaphneにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-44546 2026-06-16 13:40 2026-06-3 Show GitHub Exploit DB Packet Storm
1113 6.1 警告
Network
マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server のなりすましの脆弱性 CWE-79
CWE-918
CVE-2026-45501 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
1114 5 警告
Network
マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server の情報漏えいの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-45502 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
1115 6.5 警告
Network
マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server の情報漏えいの脆弱性 CWE-285
CWE-918
CVE-2026-45503 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
1116 5.4 警告
Network
nuxt nuxt/webpack-builder
nuxt/rspack-builder
Nuxtのnuxt/rspack-builder等の複数製品における危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開
CVE-2026-45670 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
1117 5.4 警告
Network
nuxt nuxt
nuxt/nitro-server
Nuxtのnuxt/nitro-server等の複数製品における複数の脆弱性 CWE-349
CWE-444
CWE-79
CVE-2026-46342 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
1118 9.8 緊急
Network
Defense Unicorns UDS Identity Config Defense UnicornsのUDS Identity Configにおける複数の脆弱性 CWE-287
CWE-303
CVE-2026-46389 2026-06-16 13:40 2026-06-5 Show GitHub Exploit DB Packet Storm
1119 5.8 警告
Local
Shane Pearman (spearman) unbounded-spsc Shane Pearman (spearman)のunbounded-spscにおける複数の脆弱性 CWE-125
CWE-415
CWE-704
CWE-787
CVE-2026-46690 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
1120 5.3 警告
Network
nuxt nuxt
nuxt/nitro-server
Nuxtのnuxt/nitro-server等の複数製品における複数の脆弱性 CWE-284
CWE-288
CVE-2026-47200 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320591 9.8 CRITICAL
Network
docker desktop A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. NVD-CWE-noinfo
CVE-2024-8696 2024-09-14 01:01 2024-09-13 Show GitHub Exploit DB Packet Storm
320592 9.8 CRITICAL
Network
docker desktop A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. NVD-CWE-noinfo
CVE-2024-8695 2024-09-14 01:01 2024-09-13 Show GitHub Exploit DB Packet Storm
320593 7.2 HIGH
Network
starkdigital wp_testimonial_widget Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.… CWE-89
SQL Injection
CVE-2024-43966 2024-09-14 01:01 2024-08-27 Show GitHub Exploit DB Packet Storm
320594 5.3 MEDIUM
Adjacent
phoenixcontact charx_sec-3150_firmware
charx_sec-3100_firmware
charx_sec-3050_firmware
charx_sec-3000_firmware
An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup. CWE-552
 Files or Directories Accessible to External Parties
CVE-2024-3913 2024-09-14 00:58 2024-08-13 Show GitHub Exploit DB Packet Storm
320595 5.4 MEDIUM
Network
code-projects inventory_management A vulnerability classified as problematic was found in code-projects Inventory Management 1.0. This vulnerability affects unknown code of the file /view/registration.php of the component Registration… CWE-79
Cross-site Scripting
CVE-2024-8605 2024-09-14 00:31 2024-09-10 Show GitHub Exploit DB Packet Storm
320596 4.8 MEDIUM
Network
craftcms craft_cms Craft is a content management system (CMS). Craft CMS 5 stored XSS can be triggered by the breadcrumb list and title fields with user input. CWE-79
Cross-site Scripting
CVE-2024-45406 2024-09-14 00:30 2024-09-10 Show GitHub Exploit DB Packet Storm
320597 7.2 HIGH
Network
mozilo mozilocms An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-44871 2024-09-14 00:28 2024-09-11 Show GitHub Exploit DB Packet Storm
320598 6.1 MEDIUM
Network
mozilo mozilocms A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. CWE-79
Cross-site Scripting
CVE-2024-44872 2024-09-14 00:26 2024-09-11 Show GitHub Exploit DB Packet Storm
320599 7.8 HIGH
Local
microsoft windows_10_1809
windows_server_2019
windows_server_2022
windows_11_21h2
windows_11_22h2
windows_server_2022_23h2
windows_10_1607
windows_server_2016
windows_10_22h2
windows…
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38252 2024-09-14 00:23 2024-09-11 Show GitHub Exploit DB Packet Storm
320600 7.8 HIGH
Local
microsoft windows_11_21h2
windows_11_22h2
windows_server_2022_23h2
windows_11_24h2
windows_11_23h2
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38253 2024-09-14 00:20 2024-09-11 Show GitHub Exploit DB Packet Storm