Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1821	5	警告 Local	キヤノン株式会社	CUPS Printer Driver for macOS My Image Garden for macOS	キヤノン製My Image Garden for macOSおよびCUPS Printer Driver for macOSにおけるファイルアクセス時のリンク解釈が不適切な脆弱性	CWE-59 リンク解釈の問題	CVE-2026-6891 CVE-2026-6892	2026-06-1 14:21	2026-05-29	Show	GitHub Exploit DB Packet Storm

1822	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月28日）	-	-	2026-06-1 14:21	2026-05-29	Show	GitHub Exploit DB Packet Storm

1823	7.8	重要 Local	エフサステクノロジーズ株式会社	ServerView Agents for Windows	ServerView Agents for Windowsにおける複数の脆弱性	CWE-Other その他	CVE-2026-27788 CVE-2026-32325	2026-06-1 12:15	2026-06-1	Show	GitHub Exploit DB Packet Storm

1824	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月26日）	-	-	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

1825	-	-	Casbin	Casdoor	Casdoorにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6815	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

1826	9.8	緊急 Network	nx	Nx Console	nxのNx Consoleにおける埋め込まれた悪意のあるコードに関する脆弱性	CWE-506 埋め込まれた悪意のあるコード	CVE-2026-48027	2026-05-29 11:20	2026-05-27	Show	GitHub Exploit DB Packet Storm

1827	9.8	緊急 Network	Jenkins プロジェクト	GitBucket	GitBucketにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25332	2026-05-29 11:20	2026-05-17	Show	GitHub Exploit DB Packet Storm

1828	7.5	重要 Network	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47942	2026-05-29 11:20	2026-05-16	Show	GitHub Exploit DB Packet Storm

1829	7.3	重要 Local	Airbus	TETRA Connectivity Server	AirbusのTETRA Connectivity Serverにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-7024	2026-05-29 11:20	2026-04-3	Show	GitHub Exploit DB Packet Storm

1830	7.5	重要 Network	マイクロソフト	Microsoft Global Secure Access (GSA)	Microsoft グローバルセキュアアクセス (GSA) の情報漏えいの脆弱性	CWE-269 不適切な権限管理	CVE-2026-23663	2026-05-29 11:20	2026-05-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319581	7.8	HIGH Local	ivanti	workspace_control	An authentication bypass weakness in the message broker service of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges.	CWE-306 Missing Authentication for Critical Function	CVE-2024-8012	2024-09-19 02:53	2024-09-11	Show	GitHub Exploit DB Packet Storm

319582	7.8	HIGH Local	ivanti	workspace_control	DLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.	CWE-427 Uncontrolled Search Path Element	CVE-2024-44107	2024-09-19 02:52	2024-09-11	Show	GitHub Exploit DB Packet Storm

319583	7.8	HIGH Local	ivanti	workspace_control	Insufficient server-side controls in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges.	NVD-CWE-Other	CVE-2024-44106	2024-09-19 02:50	2024-09-11	Show	GitHub Exploit DB Packet Storm

319584	7.8	HIGH Local	ivanti	workspace_control	Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to obtain OS credentials.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2024-44105	2024-09-19 02:48	2024-09-11	Show	GitHub Exploit DB Packet Storm

319585	7.8	HIGH Local	ivanti	workspace_control	An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated …	CWE-290 Authentication Bypass by Spoofing	CVE-2024-44104	2024-09-19 02:33	2024-09-11	Show	GitHub Exploit DB Packet Storm

319586	8.8	HIGH Network	external-secrets	external_secrets_operator	External Secrets Operator is a Kubernetes operator that integrates external secret management systems. The external-secrets has a deployment called default-external-secrets-cert-controller, which is …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2024-45041	2024-09-19 02:31	2024-09-10	Show	GitHub Exploit DB Packet Storm

319587	9.8	CRITICAL Network	angeljudesuarez	tailoring_management_system	A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file ssms.php. The manipulation of …	CWE-89 SQL Injection	CVE-2024-8611	2024-09-19 02:24	2024-09-10	Show	GitHub Exploit DB Packet Storm

319588	7.8	HIGH Local	ivanti	workspace_control	DLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges.	CWE-426 Untrusted Search Path	CVE-2024-44103	2024-09-19 02:18	2024-09-11	Show	GitHub Exploit DB Packet Storm

319589	6.1	MEDIUM Network	teleogistic	invite_anyone	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Boone Gorges Invite Anyone allows Reflected XSS.This issue affects Invite Anyone: from n/a…	CWE-79 Cross-site Scripting	CVE-2024-43327	2024-09-19 02:07	2024-08-18	Show	GitHub Exploit DB Packet Storm

319590	4.8	MEDIUM Network	starkdigital	wp_testimonial_widget	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial Widget allows Stored XSS.This issue affects WP Testimonial Wi…	CWE-79 Cross-site Scripting	CVE-2024-43967	2024-09-19 02:00	2024-08-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed