Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 2, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1811 | 8.5 |
重要
Network |
Open edX | Open edx Enterprise Service | Open edXのOpen edx Enterprise Serviceにおけるサーバサイドのリクエストフォージェリの脆弱性 |
CWE-918
サーバサイドリクエストフォージェリ |
CVE-2026-42860 | 2026-05-15 10:54 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1812 | 6.5 |
警告
Network |
Apache Software Foundation | Apache-airflow-providers-opensearch | Apache Software FoundationのApache-airflow-providers-opensearchにおけるログファイルからの情報漏えいに関する脆弱性 |
CWE-532
ログファイルからの情報漏えい |
CVE-2026-43826 | 2026-05-15 10:54 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1813 | 6.8 |
警告
Network |
Bpple (bx33661) | Wireshark MCP | Bpple (bx33661)のWireshark MCPにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2026-43901 | 2026-05-15 10:54 | 2026-05-11 | Show | GitHub Exploit DB Packet Storm |
| 1814 | 7.2 |
重要
Network |
アルバネットワークス株式会社 |
SD-WAN ArubaOS |
アルバネットワークス株式会社のArubaOS等の複数製品におけるコマンドインジェクションの脆弱性 |
CWE-77
コマンドインジェクション |
CVE-2026-44872 | 2026-05-15 10:54 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1815 | 5.5 |
警告
Local |
ubuntu | libefiboot | ubuntuのlibefibootにおける再帰制御に関する脆弱性 |
CWE-674
不適切な再帰制御 |
CVE-2026-6862 | 2026-05-15 10:54 | 2026-04-22 | Show | GitHub Exploit DB Packet Storm |
| 1816 | 9.6 |
緊急
Network |
Ivanti | Xtraction | IvantiのXtractionにおけるファイル名やパス名の外部制御に関する脆弱性 |
CWE-73
ファイル名やパス名の外部制御 |
CVE-2026-8043 | 2026-05-15 10:54 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1817 | 7.5 |
重要
Network |
pillarjs | multiparty | pillarjsのmultipartyにおける非効率的な正規表現の複雑さに関する脆弱性 |
CWE-1333
非効率的な正規表現の複雑さ |
CVE-2026-8159 | 2026-05-15 10:54 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1818 | 7.5 |
重要
Network |
pillarjs | multiparty | pillarjsのmultipartyにおける複数の脆弱性 |
CWE-1321 CWE-248 |
CVE-2026-8161 | 2026-05-15 10:53 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1819 | 7.5 |
重要
Network |
pillarjs | multiparty | pillarjsのmultipartyにおける例外的な状態の処理に関する脆弱性 |
CWE-755
例外的な状態における不適切な処理 |
CVE-2026-8162 | 2026-05-15 10:53 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1820 | 5.3 |
警告
Network |
Leon Timmermans | Crypt::Argon2 | Leon TimmermansのCrypt::Argon2における複数の脆弱性 |
CWE-126 CWE-191 |
CVE-2026-8463 | 2026-05-15 10:53 | 2026-05-13 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 2, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 311591 | 6.7 |
MEDIUM
Local |
qualcomm |
wsa8845h_firmware wsa8845_firmware wsa8840_firmware wsa8835_firmware wsa8832_firmware wsa8830_firmware wcn7880_firmware wcn6755_firmware wcn6650_firmware wcd9395_firmware
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
|
NVD-CWE-Other
|
CVE-2024-23377
|
2024-11-8 04:59 |
2024-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 311592 | 5.5 |
MEDIUM
Local |
huawei |
harmonyos emui |
Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CWE-532
Inclusion of Sensitive Information in Log Files |
CVE-2024-51528 | 2024-11-8 04:57 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311593 | 5.5 |
MEDIUM
Local |
huawei |
emui harmonyos |
Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
NVD-CWE-noinfo
|
CVE-2024-51527 | 2024-11-8 04:57 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311594 | 5.5 |
MEDIUM
Local |
huawei |
emui harmonyos |
LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
NVD-CWE-noinfo
|
CVE-2024-51530 | 2024-11-8 04:56 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311595 | 5.5 |
MEDIUM
Local |
huawei |
emui harmonyos |
Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability. |
NVD-CWE-noinfo
|
CVE-2024-51529 | 2024-11-8 04:56 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311596 | 5.5 |
MEDIUM
Local |
huawei | harmonyos | Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability. |
NVD-CWE-noinfo
|
CVE-2024-51521 | 2024-11-8 04:55 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311597 | 5.5 |
MEDIUM
Local |
huawei | harmonyos | Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. |
NVD-CWE-noinfo
|
CVE-2024-51520 | 2024-11-8 04:55 | 2024-11-5 | Show | GitHub Exploit DB Packet Storm |
| 311598 | 6.7 |
MEDIUM
Local |
qualcomm |
snapdragon_auto_5g_modem-rf_gen_2_firmware qca6698aq_firmware qca6584au_firmware |
Memory corruption while handling the PDR in driver for getting the remote heap maps. |
CWE-416
Use After Free |
CVE-2024-33029 | 2024-11-8 04:54 | 2024-11-4 | Show | GitHub Exploit DB Packet Storm |
| 311599 | 6.7 |
MEDIUM
Local |
qualcomm |
wsa8835_firmware wsa8830_firmware wcn3660b_firmware wcn3620_firmware wcd9380_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_429_mobile_platform_firmware sdm429w_… |
memory corruption when WiFi display APIs are invoked with large random inputs. |
NVD-CWE-noinfo
|
CVE-2024-23386 | 2024-11-8 04:54 | 2024-11-4 | Show | GitHub Exploit DB Packet Storm |
| 311600 | 7.8 |
HIGH
Local |
qualcomm |
snapdragon_w5\+_gen_1_wearable_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware snapdragon_8\+_gen_1_mobile_platform_firmware snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)… |
Memory corruption during GNSS HAL process initialization. |
CWE-416
Use After Free |
CVE-2024-38424 | 2024-11-8 04:51 | 2024-11-4 | Show | GitHub Exploit DB Packet Storm |