Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1551 9.9 緊急
Network
オラクル Oracle iAssets オラクルのOracle iAssetsにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-46822 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
1552 7.5 重要
Network
fastify fastify/accepts-serializer fastifyのfastify/accepts-serializerにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-7768 2026-06-3 17:04 2026-05-4 Show GitHub Exploit DB Packet Storm
1553 8.8 重要
Local
NanoCo NanoClaw NanoCoのNanoClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-7875 2026-06-3 17:04 2026-05-6 Show GitHub Exploit DB Packet Storm
1554 6.5 警告
Network
Synology Inc. SSL VPN Client Synology Inc.のSSL VPN Clientにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2021-47960 2026-06-3 17:04 2026-04-10 Show GitHub Exploit DB Packet Storm
1555 8.1 重要
Network
Synology Inc. SSL VPN Client Synology Inc.のSSL VPN Clientにおける認証情報の平文保存に関する脆弱性 CWE-256
平文でパスワードを保存
CVE-2021-47961 2026-06-3 17:04 2026-04-10 Show GitHub Exploit DB Packet Storm
1556 7.5 重要
Network
デル Dell Unisphere for PowerMax Virtual Appliance デルのDell Unisphere for PowerMax Virtual Applianceにおける認可に関する脆弱性 CWE-285
不適切な認可
CVE-2022-34363 2026-06-3 17:04 2026-05-22 Show GitHub Exploit DB Packet Storm
1557 7.8 重要
Local
Synology Inc. BeeDrive Synology Inc.のBeeDriveにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2023-52945 2026-06-3 17:04 2026-05-27 Show GitHub Exploit DB Packet Storm
1558 6.5 警告
Network
Apache Software Foundation Ignite Apache Software FoundationのIgniteにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル
CVE-2025-48977 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
1559 9.1 緊急
Network
Palo Alto Networks PAN-OS
Prisma Access
Palo Alto NetworksのPAN-OS等の複数製品における検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 CWE-565
検証および完全性チェックを行っていない Cookie への依存
CVE-2026-0257 2026-06-3 17:04 2026-05-13 Show GitHub Exploit DB Packet Storm
1560 8.3 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-10001 2026-06-3 17:04 2026-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319441 9.8 CRITICAL
Network
tenda fh451_firmware Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function. CWE-787
 Out-of-bounds Write
CVE-2024-46046 2024-09-20 09:35 2024-09-13 Show GitHub Exploit DB Packet Storm
319442 9.8 CRITICAL
Network
tenda ch22_firmware CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function. CWE-787
 Out-of-bounds Write
CVE-2024-46044 2024-09-20 09:34 2024-09-13 Show GitHub Exploit DB Packet Storm
319443 5.9 MEDIUM
Network
consensys gnark-crypto gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.11.0, commitments to private witnesses in Groth16 as implemented break the zero-knowledge property… NVD-CWE-noinfo
CVE-2024-45040 2024-09-20 09:13 2024-09-6 Show GitHub Exploit DB Packet Storm
319444 6.2 MEDIUM
Local
consensys gnark-crypto gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover … NVD-CWE-noinfo
CVE-2024-45039 2024-09-20 09:12 2024-09-6 Show GitHub Exploit DB Packet Storm
319445 8.8 HIGH
Network
thimpress wp_events_manager The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user su… CWE-89
SQL Injection
CVE-2024-7717 2024-09-20 09:08 2024-08-31 Show GitHub Exploit DB Packet Storm
319446 5.3 MEDIUM
Network
wpcerber cerber_security_antispam_\&_malware_scan The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it … NVD-CWE-noinfo
CVE-2022-4100 2024-09-20 09:08 2024-08-31 Show GitHub Exploit DB Packet Storm
319447 5.3 MEDIUM
Network
youtag ip-vault-wp-firewall The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address informatio… NVD-CWE-Other
CVE-2022-4536 2024-09-20 09:04 2024-08-31 Show GitHub Exploit DB Packet Storm
319448 6.3 MEDIUM
Network
microsoft edge_chromium Microsoft Edge (HTML-based) Memory Corruption Vulnerability CWE-787
 Out-of-bounds Write
CVE-2024-38207 2024-09-20 07:15 2024-08-24 Show GitHub Exploit DB Packet Storm
319449 7.8 HIGH
Local
microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-125
Out-of-bounds Read
CVE-2024-38210 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm
319450 7.8 HIGH
Local
microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-843
Type Confusion
CVE-2024-38209 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm