Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
161 7.8 重要
Local 		サムスン android サムスンのAndroidにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-21030 2026-06-8 12:32 2026-06-5 Show GitHub Exploit DB Packet Storm
162 7.8 重要
Local 		サムスン android サムスンのAndroidにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-21031 2026-06-8 12:32 2026-06-5 Show GitHub Exploit DB Packet Storm
163 9.9 緊急
Network 		Veeam Veeam Backup & Replication VeeamのVeeam Backup & ReplicationにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2026-21708 2026-06-8 12:32 2026-03-12 Show GitHub Exploit DB Packet Storm
164 7.5 重要
Network 		VMware Spring Cloud Gateway VMwareのSpring Cloud Gatewayにおけるシステム構成または設定の外部制御に関する脆弱性 New CWE-15
システム構成または設定の外部制御 		CVE-2026-22750 2026-06-8 12:32 2026-04-10 Show GitHub Exploit DB Packet Storm
165 8.1 重要
Network 		Zabbix Zabbix Zabbixにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-23925 2026-06-8 12:32 2026-03-6 Show GitHub Exploit DB Packet Storm
166 5.3 警告
Network 		OpenStack Openstack Keystone OpenStackのOpenstack Keystoneにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-33551 2026-06-8 12:32 2026-04-10 Show GitHub Exploit DB Packet Storm
167 6.5 警告
Network 		Mattermost, Inc. Mattermost Desktop Mattermost, Inc.のMattermost Desktopにおけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性 New CWE-939
カスタム URL スキームのハンドラの不適切な認可 		CVE-2026-3471 2026-06-8 12:32 2026-05-18 Show GitHub Exploit DB Packet Storm
168 7.3 重要
Local 		AIOHTTP AIOHTTP AIOHTTPにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-34993 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
169 3.1 低
Network 		Django Software Foundation Django Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性 New CWE-524
重要な情報を含むキャッシュの使用 		CVE-2026-35193 2026-06-8 12:31 2026-06-3 Show GitHub Exploit DB Packet Storm
170 6.1 警告
Network 		citeum opencti citeumのopenctiにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35212 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319371 6.5 MEDIUM
Network 		ptc thingworx An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-40395 2024-08-30 23:35 2024-08-28 Show GitHub Exploit DB Packet Storm
319372 - - - A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet… CWE-94
Code Injection 		CVE-2024-5651 2024-08-30 23:15 2024-08-12 Show GitHub Exploit DB Packet Storm
319373 6.5 MEDIUM
Network 		gitlab gitlab An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2, with the processing logic for parsing invalid commi… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2024-3114 2024-08-30 23:15 2024-08-8 Show GitHub Exploit DB Packet Storm
319374 9.8 CRITICAL
Network 		fortra filecatalyst_workflow The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confi… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-6633 2024-08-30 23:11 2024-08-28 Show GitHub Exploit DB Packet Storm
319375 7.2 HIGH
Network 		fortra filecatalyst_workflow A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, an… CWE-89
SQL Injection 		CVE-2024-6632 2024-08-30 23:07 2024-08-28 Show GitHub Exploit DB Packet Storm
319376 9.8 CRITICAL
Network 		brainlowcode brain_low-code Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows S… CWE-89
SQL Injection 		CVE-2024-7071 2024-08-30 22:56 2024-08-27 Show GitHub Exploit DB Packet Storm
319377 7.5 HIGH
Network 		flowiseai flowise An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supp… NVD-CWE-noinfo
CVE-2024-8182 2024-08-30 22:53 2024-08-27 Show GitHub Exploit DB Packet Storm
319378 6.7 MEDIUM
Local 		mongodb mongodb In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cau… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2024-8207 2024-08-30 22:07 2024-08-27 Show GitHub Exploit DB Packet Storm
319379 - - - An application can be configured to block boot attempts after consecutive tamper resets are detected, which may not occur as expected. This is possible because the TAMPERRSTCAUSE register may not be… - CVE-2024-2502 2024-08-30 22:00 2024-08-30 Show GitHub Exploit DB Packet Storm
319380 - - - A vulnerability classified as critical has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. This affects an unknown part of the file /ajax/getBasicInfo.php. The manipulatio… - CVE-2024-8303 2024-08-30 22:00 2024-08-30 Show GitHub Exploit DB Packet Storm