Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1421 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるアクティブ状態のデバッグコードに関する脆弱性 CWE-489
間違ったセッションへのデータの漏洩 		CVE-2026-49188 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1422 7.8 重要
Local 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-49189 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1423 8.8 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-49190 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1424 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49191 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1425 5.4 警告
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-49192 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1426 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-49193 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1427 8.8 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49194 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1428 9.8 緊急
Network 		日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-49199 2026-06-8 11:50 2026-05-29 Show GitHub Exploit DB Packet Storm
1429 8.6 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49202 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
1430 8.3 重要
Adjacent 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-49203 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319901 - - - Rejected reason: This CVE is a duplicate of another CVE. - CVE-2024-45804 2024-09-18 03:15 2024-09-18 Show GitHub Exploit DB Packet Storm
319902 6.5 MEDIUM
Network 		bitapps bit_form Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit Form Pro: from n/a through 2.6.4. NVD-CWE-noinfo
CVE-2024-43251 2024-09-18 03:10 2024-08-27 Show GitHub Exploit DB Packet Storm
319903 9.6 CRITICAL
Network 		joplin_project joplin Joplin is a free, open source note taking and to-do application. Joplin fails to take into account that "<" followed by a non letter character will not be considered html. As such it is possible to d… CWE-79
Cross-site Scripting 		CVE-2024-40643 2024-09-18 03:03 2024-09-10 Show GitHub Exploit DB Packet Storm
319904 6.5 MEDIUM
Network 		techexcel back_office_software This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulne… CWE-863
 Incorrect Authorization 		CVE-2024-8601 2024-09-18 02:54 2024-09-9 Show GitHub Exploit DB Packet Storm
319905 7.1 HIGH
Local 		microsoft azure_network_watcher_agent Azure Network Watcher VM Agent Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38188 2024-09-18 02:49 2024-09-11 Show GitHub Exploit DB Packet Storm
319906 7.3 HIGH
Local 		microsoft azure_network_watcher_agent Azure Network Watcher VM Agent Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-43470 2024-09-18 02:35 2024-09-11 Show GitHub Exploit DB Packet Storm
319907 3.1 LOW
Adjacent 		rapid7 insight_platform Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of… CWE-862
 Missing Authorization 		CVE-2024-8042 2024-09-18 02:25 2024-09-10 Show GitHub Exploit DB Packet Storm
319908 7.5 HIGH
Adjacent 		microsoft windows_10_1507
windows_server_2019
windows_server_2022
windows_server_2022_23h2
windows_11_24h2
windows_10_1607
windows_server_2016
windows_10_22h2
windows_11_23h2
windows… 		Windows Network Address Translation (NAT) Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-38119 2024-09-18 02:23 2024-09-11 Show GitHub Exploit DB Packet Storm
319909 9.9 CRITICAL
Network 		microsoft azure_web_apps An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network. NVD-CWE-noinfo
CVE-2024-38194 2024-09-18 02:02 2024-09-11 Show GitHub Exploit DB Packet Storm
319910 9.0 CRITICAL
Network 		microsoft azure_stack_hub Azure Stack Hub Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38216 2024-09-18 02:00 2024-09-11 Show GitHub Exploit DB Packet Storm