Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 4:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1461 6.5 警告
Network 		レッドハット Red Hat OpenShift Container Platform
OpenShift Router 		レッドハットのRed Hat OpenShift Container Platform等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42965 2026-06-9 14:11 2026-05-29 Show GitHub Exploit DB Packet Storm
1462 8.7 重要
Network 		SUSE Local Path Provisioner SUSEのLocal Path Provisionerにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-44543 2026-06-9 14:11 2026-05-28 Show GitHub Exploit DB Packet Storm
1463 9.6 緊急
Network 		Guardrails AI Guardrails AI Guardrails AIにおける埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード 		CVE-2026-45758 2026-06-9 14:11 2026-06-5 Show GitHub Exploit DB Packet Storm
1464 7.5 重要
Network 		レッドハット Red Hat OpenShift Container Platform
OpenShift Router 		レッドハットのRed Hat OpenShift Container Platform等の複数製品における認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-46579 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1465 5.3 警告
Network 		Cosimo Net::statsd CosimoのNet::statsdにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-46719
CVE-2026-46720
CVE-2026-46739 		2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1466 7.5 重要
Network 		Steve Sanbeg Etsy::StatsD Steve SanbegのEtsy::StatsDにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-46719
CVE-2026-46720
CVE-2026-46741 		2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
1467 9.8 緊急
Network 		Advanced Micro Devices (AMD) AITER (AI Tensor Engine for ROCm) Advanced Micro Devices (AMD)のAITER (AI Tensor Engine for ROCm)における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-49121 2026-06-9 14:10 2026-06-1 Show GitHub Exploit DB Packet Storm
1468 9.8 緊急
Network 		日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-49200 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1469 9.8 緊急
Network 		日本エイサー Acer Wave 7 Router Firmware T7c Gbl エイサーのAcer Wave 7 Router Firmware T7c Gblにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-49201 2026-06-9 14:10 2026-05-29 Show GitHub Exploit DB Packet Storm
1470 6.5 警告
Network 		RRWO (Robert Rothenberg) Net::CIDR::Set RRWO (Robert Rothenberg)のNet::CIDR::Setにおける安全でない等式による入力の不適切な検証に関する脆弱性 CWE-1289
安全でない等式による入力の不適切な検証 		CVE-2026-49940 2026-06-9 14:10 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319991 - - - An Incorrect Access Control vulnerability was found in /music/index.php?page=user_list and /music/index.php?page=edit_user in Kashipara Music Management System v1.0. This allows a low privileged atta… - CVE-2024-42798 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319992 - - - An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete t… - CVE-2024-42796 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319993 - - - An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_user&id=3 in Kashipara Music Management System v1.0. This vulnerability allows an … - CVE-2024-42795 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319994 - - - Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user. - CVE-2024-42794 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319995 - - - Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-34016 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319996 - - - DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking ad… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2024-45801 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319997 - - - FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/buyers list pages and shop names, that are currently not sanitized. This allows … - CVE-2024-45799 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319998 - - - A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function. - CVE-2023-45854 2024-09-20 21:31 2024-09-17 Show GitHub Exploit DB Packet Storm
319999 - - - A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code… - CVE-2024-7737 2024-09-20 21:30 2024-09-20 Show GitHub Exploit DB Packet Storm
320000 - - - A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execu… - CVE-2024-7736 2024-09-20 21:30 2024-09-20 Show GitHub Exploit DB Packet Storm