Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1421 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint のリモート コードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-45659 2026-05-29 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
1422 9.9 緊急
Network 		Twenty.com PBC Twenty Twenty.com PBCのTwentyにおける複数の脆弱性 CWE-78
CWE-89
CVE-2026-46624 2026-05-29 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1423 5.3 警告
Network 		Apache Software Foundation apache-airflow-providers-fab Apache Software Foundationのapache-airflow-providers-fabにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-46745 2026-05-29 11:16 2026-05-25 Show GitHub Exploit DB Packet Storm
1424 9.8 緊急
Network 		マイクロソフト Azure Resource Manager Azure Resource Manager の特権昇格の脆弱性 CWE-287
CWE-noinfo
CVE-2026-47280 2026-05-29 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
1425 8.2 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-4868 2026-05-29 11:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1426 6.5 警告
Network 		FastNetMon FastNetMon Pavel OdintsovのFastNetMonにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-48684 2026-05-29 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1427 6.5 警告
Network 		FastNetMon FastNetMon Pavel OdintsovのFastNetMonにおけるレングスパラメーターの不整合による処理に関する脆弱性 CWE-130
レングスパラメーターの不整合による不適切な処理 		CVE-2026-48685 2026-05-29 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1428 9.8 緊急
Network 		FastNetMon FastNetMon Pavel OdintsovのFastNetMonにおける複数の脆弱性 CWE-120
CWE-787
CVE-2026-48686 2026-05-29 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1429 9.8 緊急
Network 		FastNetMon FastNetMon Pavel OdintsovのFastNetMonにおけるOS コマンドインジェクションの脆弱性 CWE-78
CWE-78
CVE-2026-48687 2026-05-29 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1430 7.5 重要
Network 		FastNetMon FastNetMon Pavel OdintsovのFastNetMonにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-48688 2026-05-29 11:16 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318761 7.5 HIGH
Network 		ordat ordat.erp ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. CWE-89
SQL Injection 		CVE-2024-34334 2024-09-19 05:32 2024-09-13 Show GitHub Exploit DB Packet Storm
318762 9.8 CRITICAL
Network 		soplanning soplanning A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. With this vulnerability, an attacker can upload executable files that are moved to a publ… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-27115 2024-09-19 05:32 2024-09-11 Show GitHub Exploit DB Packet Storm
318763 3.1 LOW
Network 		keyfactor ejbca The CMP CLI client in KeyFactor EJBCA before 8.3.1 has only 6 octets of salt, and is thus not compliant with the security requirements of RFC 4211, and might make man-in-the-middle attacks easier. CM… NVD-CWE-noinfo
CVE-2024-36066 2024-09-19 05:28 2024-09-13 Show GitHub Exploit DB Packet Storm
318764 7.8 HIGH
Local 		wibu wibukey An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an arbitrary address write, resulting in ke… CWE-787
 Out-of-bounds Write 		CVE-2024-45181 2024-09-19 05:26 2024-09-13 Show GitHub Exploit DB Packet Storm
318765 6.1 MEDIUM
Network 		discourse calendar Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rendering event names can be susceptible to XSS attacks. This vulnerability only aff… CWE-79
Cross-site Scripting 		CVE-2024-45303 2024-09-19 05:25 2024-09-13 Show GitHub Exploit DB Packet Storm
318766 6.1 MEDIUM
Network 		eclipse glassfish In Eclipse Glassfish versions prior to 7.0.10, a URL redirection vulnerability to untrusted sites existed. This vulnerability is caused by the vulnerability (CVE-2023-41080) in the Apache code includ… CWE-601
Open Redirect 		CVE-2024-8646 2024-09-19 05:20 2024-09-11 Show GitHub Exploit DB Packet Storm
318767 6.5 MEDIUM
Network 		reedos aim-star This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulat… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-45786 2024-09-19 05:12 2024-09-11 Show GitHub Exploit DB Packet Storm
318768 7.5 HIGH
Network 		reedos aim-star This vulnerability exists in Reedos aiM-Star version 2.0.1 due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by … NVD-CWE-Other
CVE-2024-45788 2024-09-19 04:57 2024-09-11 Show GitHub Exploit DB Packet Storm
318769 4.3 MEDIUM
Network 		reedos aim-star This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API endpoint used during the registration process. An authenticated remote attacke… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2024-45789 2024-09-19 04:55 2024-09-11 Show GitHub Exploit DB Packet Storm
318770 7.8 HIGH
Local 		schneider-electric vijeo_designer_embedded_in_ecostruxure_machine_expert
vijeo_designer 		CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity and availability of the workstation when non-admin authenticated u… NVD-CWE-noinfo
CVE-2024-8306 2024-09-19 04:51 2024-09-12 Show GitHub Exploit DB Packet Storm