Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
171 7.8 重要
Local
Kovidgoyal Kitty KovidgoyalのKittyにおける複数の脆弱性 New CWE-150
CWE-94
CVE-2026-54057 2026-06-17 15:38 2026-06-12 Show GitHub Exploit DB Packet Storm
172 7.7 重要
Network
Mattermost, Inc. Mattermost Desktop Mattermost, Inc.のMattermost Desktopにおける認証情報の不十分な保護に関する脆弱性 New CWE-522
認証情報の不十分な保護
CVE-2026-6517 2026-06-17 15:38 2026-06-15 Show GitHub Exploit DB Packet Storm
173 8.1 重要
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み
CVE-2026-7383 2026-06-17 15:38 2026-06-9 Show GitHub Exploit DB Packet Storm
174 8.1 重要
Network
langflow langflow langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-7787 2026-06-17 15:38 2026-06-11 Show GitHub Exploit DB Packet Storm
175 8.8 重要
Network
IBM IBM i IBMのIBM iにおける制御されていない検索パスの要素に関する脆弱性 New CWE-427
制御されていない検索パスの要素
CVE-2026-7870 2026-06-17 15:38 2026-06-11 Show GitHub Exploit DB Packet Storm
176 6.5 警告
Network
Mattermost, Inc. Mattermost Desktop Mattermost, Inc.のMattermost Desktopにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-8683 2026-06-17 15:38 2026-06-15 Show GitHub Exploit DB Packet Storm
177 7.5 重要
Network
OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-9076 2026-06-17 15:38 2026-06-9 Show GitHub Exploit DB Packet Storm
178 8.1 重要
Network
F5 Networks nginx open source
NGINX plus
F5 Networksのnginx open source等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-9256 2026-06-17 15:37 2026-05-22 Show GitHub Exploit DB Packet Storm
179 4.3 警告
Network
webpack.js webpack-dev-server webpackのwebpack-dev-serverにおける複数の脆弱性 New CWE-346
CWE-441
CVE-2026-9595 2026-06-17 15:37 2026-06-15 Show GitHub Exploit DB Packet Storm
180 8.8 重要
Network
Trychroma ChromaDB TrychromaのChromaDBにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-45830 2026-06-17 15:37 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320231 6.5 MEDIUM
Network
lenovo xclarity_administrator A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call. NVD-CWE-noinfo
CVE-2024-45104 2024-09-19 10:49 2024-09-14 Show GitHub Exploit DB Packet Storm
320232 9.8 CRITICAL
Network
heyewei jfinalcms A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads t… CWE-22
Path Traversal
CVE-2024-8782 2024-09-19 10:46 2024-09-14 Show GitHub Exploit DB Packet Storm
320233 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: Encryption procedure host vulnerability NVD-CWE-noinfo
CVE-2024-5754 2024-09-19 10:44 2024-09-14 Show GitHub Exploit DB Packet Storm
320234 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: Missing length checks of net_buf in rfcomm_handle_data CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2024-6258 2024-09-19 10:40 2024-09-14 Show GitHub Exploit DB Packet Storm
320235 9.8 CRITICAL
Network
mayurik best_free_law_office_management SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/con… CWE-89
SQL Injection
CVE-2024-44430 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
320236 8.8 HIGH
Network
qdocs smart_school A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the comp… CWE-89
SQL Injection
CVE-2024-8784 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
320237 5.4 MEDIUM
Network
opentibiabr myaac A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Han… CWE-79
Cross-site Scripting
CVE-2024-8783 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
320238 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: Unchecked user input in bap_broadcast_assistant CWE-787
 Out-of-bounds Write
CVE-2024-5931 2024-09-19 10:35 2024-09-14 Show GitHub Exploit DB Packet Storm
320239 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT:Classic: Multiple missing buf length checks CWE-369
 Divide By Zero
CVE-2024-6135 2024-09-19 10:34 2024-09-14 Show GitHub Exploit DB Packet Storm
320240 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: HCI: adv_ext_report Improper discarding in adv_ext_report CWE-787
 Out-of-bounds Write
CVE-2024-6259 2024-09-19 10:33 2024-09-14 Show GitHub Exploit DB Packet Storm