Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1371 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-42355 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1372 5.1 警告
Local 		uriparser project uriparser uriparser projectのuriparserにおける数値打ち切り誤差に関する脆弱性 CWE-197
数値打ち切り誤差 		CVE-2026-42371 2026-05-20 13:30 2026-04-27 Show GitHub Exploit DB Packet Storm
1373 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42442 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1374 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2026-42443 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1375 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42444 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1376 4.3 警告
Network 		mintplexlabs anythingllm mintplexlabsのanythingllmにおける複数の脆弱性 CWE-200
CWE-639
CWE-639
CVE-2026-42456 2026-05-20 13:30 2026-05-8 Show GitHub Exploit DB Packet Storm
1377 6.1 警告
Network 		Gofiber Fiber GofiberのFiberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42554 2026-05-20 13:29 2026-05-11 Show GitHub Exploit DB Packet Storm
1378 9 緊急
Network 		Gitroom Postiz GitroomのPostizにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42556 2026-05-20 13:29 2026-05-8 Show GitHub Exploit DB Packet Storm
1379 7.5 重要
Network 		Netty Netty Nettyにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性 CWE-772
有効なライフタイム後のリソースの解放の欠如 		CVE-2026-42577 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
1380 7.5 重要
Network 		Netty Netty NettyにおけるHTTP レスポンス分割に関する脆弱性 CWE-113
HTTP レスポンスの分割 		CVE-2026-42578 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311231 - - - Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access. CWE-190
 Integer Overflow or Wraparound 		CVE-2024-21783 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311232 - - - An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext within application logs. This flaw results in the unintentional exposure of se… - CVE-2024-11193 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311233 - - - In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. U… - CVE-2024-43091 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311234 - - - In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interac… - CVE-2024-43090 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311235 - - - In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional exec… - CVE-2024-43089 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311236 - - - In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to another user on the device due to a missing permission check. This could lead to … - CVE-2024-43088 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311237 - - - In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in t… - CVE-2024-43087 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311238 - - - In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disc… - CVE-2024-43086 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311239 - - - In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escala… - CVE-2024-43085 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
311240 - - - In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. Us… - CVE-2024-43084 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm