|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 2, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1611 | 7.5 |
重要
Network |
アップル |
tvOS iOS watchOS visionos iPadOS |
アップルのiPadOS等の複数製品における型の取り違えに関する脆弱性 |
CWE-843
型の取り違え |
CVE-2026-28983 | 2026-05-15 11:04 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1612 | 6.2 |
警告
Local |
アップル |
tvOS iOS iPadOS |
アップルのiPadOS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 |
CWE-476
NULL ポインタデリファレンス |
CVE-2026-28985 | 2026-05-15 11:04 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1613 | 5.5 |
警告
Local |
アップル |
visionos iOS iPadOS watchOS |
アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性 |
CWE-284
不適切なアクセス制御 |
CVE-2026-28988 | 2026-05-15 11:04 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1614 | 7.5 |
重要
Network |
アップル |
tvOS iOS watchOS visionos iPadOS |
アップルのiPadOS等の複数製品における境界外読み取りに関する脆弱性 |
CWE-125
境界外読み取り |
CVE-2026-28991 | 2026-05-15 11:04 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1615 | 4.7 |
警告
Local |
アップル |
tvOS iOS watchOS visionos iPadOS |
アップルのiPadOS等の複数製品における競合状態に関する脆弱性 |
CWE-362
競合状態 |
CVE-2026-28992 | 2026-05-15 11:03 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1616 | 5.5 |
警告
Local |
アップル |
visionos iOS iPadOS |
アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性 |
CWE-284
不適切なアクセス制御 |
CVE-2026-28993 | 2026-05-15 11:03 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1617 | 5.3 |
警告
Adjacent |
アップル |
tvOS iOS iPadOS watchOS |
アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性 |
CWE-416
解放済みメモリの使用 |
CVE-2026-28994 | 2026-05-15 11:03 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1618 | 9.8 |
緊急
Network |
Rocket.Chat | Rocket.Chat | Rocket.ChatにおけるSQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2026-29198 | 2026-05-15 11:03 | 2026-04-23 | Show | GitHub Exploit DB Packet Storm |
| 1619 | 6.5 |
警告
Network |
Textpattern | Textpattern CMS | TextpatternのTextpattern CMSにおけるアクセス制御に関する脆弱性 |
CWE-284
不適切なアクセス制御 |
CVE-2026-30452 | 2026-05-15 11:03 | 2026-04-21 | Show | GitHub Exploit DB Packet Storm |
| 1620 | 9.1 |
緊急
Network |
Artica ST | Pandora FMS | Artica STのPandora FMSにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 |
CWE-1188
リソースの安全ではないデフォルト値への初期化 |
CVE-2026-30805 | 2026-05-15 11:03 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 2, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 311591 | 6.7 |
MEDIUM
Local |
qualcomm |
wsa8845h_firmware wsa8845_firmware wsa8840_firmware wsa8835_firmware wsa8832_firmware wsa8830_firmware wcn7880_firmware wcn6755_firmware wcn6650_firmware wcd9395_firmware | Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver. |
NVD-CWE-Other
|
CVE-2024-23377 | 2024-11-8 04:59 | 2024-11-4 | Show | GitHub Exploit DB Packet Storm |
| 311592 | 5.5 |
MEDIUM
Local |
huawei |
harmonyos emui |
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CWE-532
Inclusion of Sensitive Information in Log Files |
CVE-2024-51528 | 2024-11-8 04:57 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311593 | 5.5 |
MEDIUM
Local |
huawei |
emui harmonyos |
Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
NVD-CWE-noinfo
|
CVE-2024-51527 | 2024-11-8 04:57 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311594 | 5.5 |
MEDIUM
Local |
huawei |
emui harmonyos |
LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
NVD-CWE-noinfo
|
CVE-2024-51530 | 2024-11-8 04:56 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311595 | 5.5 |
MEDIUM
Local |
huawei |
emui harmonyos |
Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability. |
NVD-CWE-noinfo
|
CVE-2024-51529 | 2024-11-8 04:56 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311596 | 5.5 |
MEDIUM
Local |
huawei | harmonyos | Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability. |
NVD-CWE-noinfo
|
CVE-2024-51521 | 2024-11-8 04:55 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311597 | 5.5 |
MEDIUM
Local |
huawei | harmonyos | Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. |
NVD-CWE-noinfo
|
CVE-2024-51520 | 2024-11-8 04:55 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311598 | 6.7 |
MEDIUM
Local |
qualcomm |
snapdragon_auto_5g_modem-rf_gen_2_firmware qca6698aq_firmware qca6584au_firmware |
Memory corruption while handling the PDR in driver for getting the remote heap maps. |
CWE-416
Use After Free |
CVE-2024-33029 | 2024-11-8 04:54 | 2024-11-4 | Show | GitHub Exploit DB Packet Storm |
| 311599 | 6.7 |
MEDIUM
Local |
qualcomm |
wsa8835_firmware wsa8830_firmware wcn3660b_firmware wcn3620_firmware wcd9380_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_429_mobile_platform_firmware sdm429w_… |
memory corruption when WiFi display APIs are invoked with large random inputs. |
NVD-CWE-noinfo
|
CVE-2024-23386 | 2024-11-8 04:54 | 2024-11-4 | Show | GitHub Exploit DB Packet Storm |
| 311600 | 7.8 |
HIGH
Local |
qualcomm |
snapdragon_w5\+_gen_1_wearable_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware snapdragon_8\+_gen_1_mobile_platform_firmware snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)… |
Memory corruption during GNSS HAL process initialization. |
CWE-416
Use After Free |
CVE-2024-38424 | 2024-11-8 04:51 | 2024-11-4 | Show | GitHub Exploit DB Packet Storm |