Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 2:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1651 9.8 緊急
Network 		VMware Spring Boot VMwareのSpring Bootにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-40974 2026-05-18 12:15 2026-04-28 Show GitHub Exploit DB Packet Storm
1652 7.2 重要
Network 		SonicWALL SMA7200 ファームウェア
SMA7210 ファームウェア
SMA8200v
SMA6200 ファームウェア
SMA6210 ファームウェア 		SonicWALLのSMA6200 ファームウェア等の複数製品におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-4112 2026-05-18 12:15 2026-04-9 Show GitHub Exploit DB Packet Storm
1653 7.2 重要
Network 		SonicWALL SMA7200 ファームウェア
SMA7210 ファームウェア
SMA8200v
SMA6200 ファームウェア
SMA6210 ファームウェア 		SonicWALLのSMA6200 ファームウェア等の複数製品におけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい 		CVE-2026-4113 2026-05-18 12:15 2026-04-9 Show GitHub Exploit DB Packet Storm
1654 6.6 警告
Network 		SonicWALL SMA7200 ファームウェア
SMA7210 ファームウェア
SMA8200v
SMA6200 ファームウェア
SMA6210 ファームウェア 		SonicWALLのSMA6200 ファームウェア等の複数製品におけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-4114 2026-05-18 12:15 2026-04-9 Show GitHub Exploit DB Packet Storm
1655 7.2 重要
Network 		SonicWALL SMA7200 ファームウェア
SMA7210 ファームウェア
SMA8200v
SMA6200 ファームウェア
SMA6210 ファームウェア 		SonicWALLのSMA6200 ファームウェア等の複数製品におけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-4116 2026-05-18 12:15 2026-04-9 Show GitHub Exploit DB Packet Storm
1656 10 緊急
Network 		Minetest Minetest Minetestにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41196 2026-05-18 12:15 2026-04-23 Show GitHub Exploit DB Packet Storm
1657 7.5 重要
Network 		Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41284 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
1658 6.5 警告
Network 		liquidjs liquidjs liquidjsにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-41311 2026-05-18 12:15 2026-05-9 Show GitHub Exploit DB Packet Storm
1659 5.3 警告
Network 		n8n-MCP n8n-MCP n8n-MCPにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-41495 2026-05-18 12:15 2026-05-8 Show GitHub Exploit DB Packet Storm
1660 6.2 警告
Local 		マイクロソフト Microsoft 365 Copilot M365 Copilot for Desktop のスプーフィングの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41614 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319131 6.5 MEDIUM
Network 		ibm openpages_with_watson
openpages_grc_platform 		IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs. CWE-306
Missing Authentication for Critical Function 		CVE-2024-35151 2024-08-24 00:32 2024-08-22 Show GitHub Exploit DB Packet Storm
319132 5.9 MEDIUM
Network 		ibm sterling_connect_direct_web_services IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.… CWE-311
Missing Encryption of Sensitive Data 		CVE-2024-39746 2024-08-24 00:25 2024-08-22 Show GitHub Exploit DB Packet Storm
319133 7.5 HIGH
Network 		ibm sterling_connect_direct_web_services IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-39745 2024-08-24 00:25 2024-08-22 Show GitHub Exploit DB Packet Storm
319134 4.3 MEDIUM
Network 		ibm sterling_connect_direct_web_services IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted fro… CWE-352
 Origin Validation Error 		CVE-2024-39744 2024-08-24 00:25 2024-08-22 Show GitHub Exploit DB Packet Storm
319135 5.3 MEDIUM
Network 		youdiancms youdiancms A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to informati… NVD-CWE-noinfo
CVE-2024-7328 2024-08-24 00:25 2024-08-1 Show GitHub Exploit DB Packet Storm
319136 5.4 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due… CWE-79
Cross-site Scripting 		CVE-2024-20443 2024-08-24 00:18 2024-08-8 Show GitHub Exploit DB Packet Storm
319137 4.8 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due… CWE-79
Cross-site Scripting 		CVE-2024-20479 2024-08-24 00:14 2024-08-8 Show GitHub Exploit DB Packet Storm
319138 5.3 MEDIUM
Network 		hp instantos Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results… NVD-CWE-noinfo
CVE-2024-42396 2024-08-24 00:07 2024-08-7 Show GitHub Exploit DB Packet Storm
319139 5.3 MEDIUM
Network 		arubanetworks
hp 		arubaos
instantos 		Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to… NVD-CWE-noinfo
CVE-2024-42400 2024-08-24 00:06 2024-08-7 Show GitHub Exploit DB Packet Storm
319140 5.3 MEDIUM
Network 		arubanetworks
hp 		arubaos
instantos 		Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to… NVD-CWE-noinfo
CVE-2024-42399 2024-08-24 00:06 2024-08-7 Show GitHub Exploit DB Packet Storm