Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1631 5.4 警告
Network 		strapi strapi strapiにおける複数の脆弱性 CWE-434
CWE-693
CVE-2026-22707 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
1632 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-23824 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
1633 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-23825 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
1634 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23826 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
1635 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-23827 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
1636 7.5 重要
Network 		Fleet Device Management fleet Fleet Device Managementのfleetにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-23998 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
1637 5.3 警告
Network 		Fleet Device Management fleet Fleet Device Managementのfleetにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-24000 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
1638 7.5 重要
Network 		strapi strapi strapiにおける複数の脆弱性 CWE-200
CWE-22
CWE-943
CVE-2026-27886 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
1639 6.5 警告
Network 		Grafana Labs Grafana Grafana LabsのGrafanaにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-28376 2026-05-18 12:07 2026-05-13 Show GitHub Exploit DB Packet Storm
1640 2.7 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-2900 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311451 - - - An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component. - CVE-2024-51055 2024-11-14 01:35 2024-11-9 Show GitHub Exploit DB Packet Storm
311452 - - - An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function. - CVE-2024-40240 2024-11-14 01:35 2024-11-9 Show GitHub Exploit DB Packet Storm
311453 7.0 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). Martin KaFai Lau reported use-after-free [0] in reqsk_timer_handler(… CWE-416
 Use After Free 		CVE-2024-50154 2024-11-14 01:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311454 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() The sun3_82586_send_packet() returns NETDEV_TX_OK without f… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-50168 2024-11-14 01:16 2024-11-7 Show GitHub Exploit DB Packet Storm
311455 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If snd_hda_gen_add_kctl fails to allocate memory and returns NULL, then NULL poin… CWE-476
 NULL Pointer Dereference 		CVE-2024-50160 2024-11-14 01:13 2024-11-7 Show GitHub Exploit DB Packet Storm
311456 6.5 MEDIUM
Adjacent 		zephyrproject zephyr In ascs_cp_rsp_add in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow. CWE-787
 Out-of-bounds Write 		CVE-2024-6442 2024-11-14 01:04 2024-10-4 Show GitHub Exploit DB Packet Storm
311457 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a possible memory leak In bnxt_re_setup_chip_ctx() when bnxt_qplib_map_db_bar() fails driver is not freeing the… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-50172 2024-11-14 00:55 2024-11-7 Show GitHub Exploit DB Packet Storm
311458 - - - The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the li… - CVE-2024-45289 2024-11-14 00:35 2024-11-13 Show GitHub Exploit DB Packet Storm
311459 - - - File Upload vulnerability in Laravel CMS v.1.4.7 and before allows a remote attacker to execute arbitrary code via the shell.php a component. - CVE-2024-51152 2024-11-14 00:35 2024-11-9 Show GitHub Exploit DB Packet Storm
311460 - - - An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function. - CVE-2024-40239 2024-11-14 00:35 2024-11-9 Show GitHub Exploit DB Packet Storm