Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1691 8.1 重要
Network 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows Server 2022
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows パフォーマンス モニターのリモート コード実行に対する脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-42974 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1692 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Windows 10 1809
Microsoft Windows&… 		Windows プッシュ通知の特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-42977 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1693 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Windows 10 1809
Microsoft Windows&… 		Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-42978 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1694 7 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Windows 10 1809
Microsoft Windows&… 		Windows カーネルの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-42984 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1695 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45453 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
1696 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint のリモート コードが実行される脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-45454 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
1697 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45462 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
1698 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45464 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
1699 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45465 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
1700 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-45479 2026-06-11 16:23 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320741 5.4 MEDIUM
Network 		wpsocio wp_telegram_widget_and_join_link Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link allows Stored XSS.This issue affects WP Telegram… CWE-79
Cross-site Scripting 		CVE-2024-43309 2024-09-13 01:39 2024-08-19 Show GitHub Exploit DB Packet Storm
320742 - - - SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component. - CVE-2024-42760 2024-09-13 01:35 2024-09-12 Show GitHub Exploit DB Packet Storm
320743 5.4 MEDIUM
Network 		gutentor gutentor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS… CWE-79
Cross-site Scripting 		CVE-2024-43308 2024-09-13 01:30 2024-08-19 Show GitHub Exploit DB Packet Storm
320744 5.1 MEDIUM
Local 		arm mbed_tls An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not… NVD-CWE-noinfo
CVE-2024-45157 2024-09-13 01:29 2024-09-6 Show GitHub Exploit DB Packet Storm
320745 9.8 CRITICAL
Network 		mi file_manager A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attac… CWE-22
Path Traversal 		CVE-2023-26321 2024-09-13 01:29 2024-08-28 Show GitHub Exploit DB Packet Storm
320746 7.1 HIGH
Network 		dylanjkotze zephyr_project_manager Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.102. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-43916 2024-09-13 01:21 2024-08-27 Show GitHub Exploit DB Packet Storm
320747 5.4 MEDIUM
Network 		xjd2020 fastcms A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross sit… CWE-79
Cross-site Scripting 		CVE-2024-7733 2024-09-13 01:20 2024-08-14 Show GitHub Exploit DB Packet Storm
320748 5.4 MEDIUM
Network 		deathbreak drug A cross-site scripting (XSS) vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user para… CWE-79
Cross-site Scripting 		CVE-2024-44837 2024-09-13 01:17 2024-09-6 Show GitHub Exploit DB Packet Storm
320749 7.5 HIGH
Network 		dataflowx datadiodex Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in DataFlowX Technology DataDiodeX allows Path Traversal.This issue affects DataDiodeX: from v3.0.0 before… CWE-22
Path Traversal 		CVE-2024-6445 2024-09-13 01:14 2024-09-6 Show GitHub Exploit DB Packet Storm
320750 9.8 CRITICAL
Network 		dlink di-8100g_firmware D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgrade_filter.asp file CWE-77
Command Injection 		CVE-2024-44401 2024-09-13 01:09 2024-09-7 Show GitHub Exploit DB Packet Storm