Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
181 9.8 緊急
Network
InHand Networks ir302 ファームウェア
IR615 ファームウェア
IR315 Firmware
IR305 Firmware
InHand Networksのir302 ファームウェア等の複数製品におけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-38707 2026-06-3 17:05 2026-05-28 Show GitHub Exploit DB Packet Storm
182 7.8 重要
Local
MediaArea.net SARL MediaInfoLib MediaArea.net SARLのMediaInfoLibにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー
CVE-2026-22554 2026-06-3 17:05 2026-05-20 Show GitHub Exploit DB Packet Storm
183 6.5 警告
Network
The Go Project Net The Go ProjectのNetにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-25680 2026-06-3 17:05 2026-05-22 Show GitHub Exploit DB Packet Storm
184 6.1 警告
Network
The Go Project Net The Go ProjectのNetにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 New CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限
CVE-2026-25681 2026-06-3 17:05 2026-05-22 Show GitHub Exploit DB Packet Storm
185 6.1 警告
Network
The Go Project Net The Go ProjectのNetにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 New CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限
CVE-2026-27136 2026-06-3 17:05 2026-05-22 Show GitHub Exploit DB Packet Storm
186 9.8 緊急
Network
Linaro Open Asymmetric Multi Processing (OpenAMP) LinaroのOpen Asymmetric Multi Processing (OpenAMP)における整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-37540 2026-06-3 17:05 2026-05-1 Show GitHub Exploit DB Packet Storm
187 9.6 緊急
Network
The Go Project Net The Go ProjectのNetにおける安全でない等式による入力の不適切な検証に関する脆弱性 New CWE-1289
安全でない等式による入力の不適切な検証
CVE-2026-39821 2026-06-3 17:05 2026-05-22 Show GitHub Exploit DB Packet Storm
188 7.5 重要
Network
マイクロソフト Microsoft Planetary Computer Pro (GeoCatalog) Microsoft Planetary Computer Pro の情報漏えいの脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-41104 2026-06-3 17:04 2026-05-22 Show GitHub Exploit DB Packet Storm
189 9.6 緊急
Network
charm Wish charmのWishにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-41589 2026-06-3 17:04 2026-05-7 Show GitHub Exploit DB Packet Storm
190 9.1 緊急
Network
i18next i18next-http-backend i18nextのi18next-http-backendにおける複数の脆弱性 New CWE-22
CWE-74
CVE-2026-41691 2026-06-3 17:04 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319191 - - - An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a me… - CVE-2024-45169 2024-08-23 00:35 2024-08-22 Show GitHub Exploit DB Packet Storm
319192 - - - The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, a… - CVE-2024-45163 2024-08-23 00:35 2024-08-22 Show GitHub Exploit DB Packet Storm
319193 - - - Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php. - CVE-2024-42552 2024-08-23 00:35 2024-08-20 Show GitHub Exploit DB Packet Storm
319194 9.8 CRITICAL
Network
secom dr.id_access_control Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database cont… CWE-89
SQL Injection
CVE-2024-7731 2024-08-22 23:40 2024-08-14 Show GitHub Exploit DB Packet Storm
319195 9.8 CRITICAL
Network
traccar traccar Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by … CWE-287
Improper Authentication
CVE-2024-7746 2024-08-22 23:40 2024-08-14 Show GitHub Exploit DB Packet Storm
319196 5.5 MEDIUM
Local
fortinet fortios An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained wri… NVD-CWE-Other
CVE-2024-36505 2024-08-22 23:36 2024-08-14 Show GitHub Exploit DB Packet Storm
319197 - - - An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable. - CVE-2024-45168 2024-08-22 23:35 2024-08-22 Show GitHub Exploit DB Packet Storm
319198 - - - An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a me… - CVE-2024-45166 2024-08-22 23:35 2024-08-22 Show GitHub Exploit DB Packet Storm
319199 9.8 CRITICAL
Network
arajajyothibabu school_management_system School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php. CWE-89
SQL Injection
CVE-2024-42573 2024-08-22 23:35 2024-08-20 Show GitHub Exploit DB Packet Storm
319200 7.8 HIGH
Local
fortinet fortimanager
fortianalyzer
A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 t… NVD-CWE-Other
CVE-2024-21757 2024-08-22 23:34 2024-08-14 Show GitHub Exploit DB Packet Storm