Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1491 6.2 警告
Local 		マイクロソフト Microsoft 365 Copilot M365 Copilot for Desktop のスプーフィングの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41614 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
1492 6.1 警告
Network 		Open Source Geospatial Foundation MapServer Open Source Geospatial FoundationのMapServerにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-42030 2026-05-18 12:15 2026-05-8 Show GitHub Exploit DB Packet Storm
1493 6.5 警告
Network 		argoproj Argo Workflows Argo Project AuthorsのArgo WorkflowsにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-42183 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
1494 7.5 重要
Network 		russh project
warpgate project		 russh
warpgate 		russh project等の複数ベンダの製品における複数の脆弱性 CWE-770
CWE-789
CVE-2026-42189 2026-05-18 12:14 2026-05-8 Show GitHub Exploit DB Packet Storm
1495 7.5 重要
Network 		OWASP ModSecurity OWASPのModSecurityにおける複数の脆弱性 CWE-191
CWE-248
CVE-2026-42268 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1496 4.3 警告
Network 		n8n-MCP n8n-MCP n8n-MCPにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-42282 2026-05-18 12:14 2026-05-8 Show GitHub Exploit DB Packet Storm
1497 7.5 重要
Network 		argoproj Argo Workflows Argo Project AuthorsのArgo Workflowsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42294 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
1498 4.4 警告
Local 		Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-42307 2026-05-18 12:14 2026-05-8 Show GitHub Exploit DB Packet Storm
1499 7.8 重要
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-42311 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
1500 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-42445 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319141 5.3 MEDIUM
Network 		arubanetworks
hp 		arubaos
instantos 		Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to… NVD-CWE-noinfo
CVE-2024-42398 2024-08-24 00:06 2024-08-7 Show GitHub Exploit DB Packet Storm
319142 5.3 MEDIUM
Network 		hp instantos Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results… NVD-CWE-noinfo
CVE-2024-42397 2024-08-24 00:06 2024-08-7 Show GitHub Exploit DB Packet Storm
319143 4.3 MEDIUM
Network 		mattermost mattermost Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly validate synced reactions, when shared channels are enabled, which allows a malicious remote to create arbitrary reactions on arbit… NVD-CWE-noinfo
CVE-2024-29977 2024-08-23 23:52 2024-08-2 Show GitHub Exploit DB Packet Storm
319144 6.4 MEDIUM
Network 		mattermost mattermost Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to disallow the modification of local users when syncing users in shared channels. which allows a malicious rem… NVD-CWE-noinfo
CVE-2024-36492 2024-08-23 23:51 2024-08-2 Show GitHub Exploit DB Packet Storm
319145 6.5 MEDIUM
Network 		mattermost mattermost Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5 and 9.8.x <= 9.8.1 fail to properly validate that the channel that comes from the sync message is a shared channel, when shared chan… NVD-CWE-noinfo
CVE-2024-39274 2024-08-23 23:39 2024-08-2 Show GitHub Exploit DB Packet Storm
319146 9.6 CRITICAL
Network 		mattermost mattermost Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5 and 9.8.x <= 9.8.1 fail to disallow unsolicited invites to expose access to local channels, when shared channels are enabled, which … NVD-CWE-noinfo
CVE-2024-39777 2024-08-23 23:36 2024-08-2 Show GitHub Exploit DB Packet Storm
319147 8.7 HIGH
Network 		mattermost mattermost Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abu… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2024-39832 2024-08-23 23:35 2024-08-2 Show GitHub Exploit DB Packet Storm
319148 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside state checks If the state is not idle then resolve_prepare_src() should immed… CWE-416
 Use After Free 		CVE-2022-48925 2024-08-23 11:07 2024-08-22 Show GitHub Exploit DB Packet Storm
319149 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one side we have indio_dev->num_channels includes all ph… CWE-787
 Out-of-bounds Write 		CVE-2022-48927 2024-08-23 11:05 2024-08-22 Show GitHub Exploit DB Packet Storm
319150 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: add spinlock for rndis response list There's no lock for rndis response list. It could cause list corruption … NVD-CWE-noinfo
CVE-2022-48926 2024-08-23 11:05 2024-08-22 Show GitHub Exploit DB Packet Storm