Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
181	9.8	緊急 Network	InHand Networks	ir302 ファームウェア IR615 ファームウェア IR315 Firmware IR305 Firmware	InHand Networksのir302 ファームウェア等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-38707	2026-06-3 17:05	2026-05-28	Show	GitHub Exploit DB Packet Storm

182	7.8	重要 Local	MediaArea.net SARL	MediaInfoLib	MediaArea.net SARLのMediaInfoLibにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-22554	2026-06-3 17:05	2026-05-20	Show	GitHub Exploit DB Packet Storm

183	6.5	警告 Network	The Go Project	Net	The Go ProjectのNetにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-25680	2026-06-3 17:05	2026-05-22	Show	GitHub Exploit DB Packet Storm

184	6.1	警告 Network	The Go Project	Net	The Go ProjectのNetにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-25681	2026-06-3 17:05	2026-05-22	Show	GitHub Exploit DB Packet Storm

185	6.1	警告 Network	The Go Project	Net	The Go ProjectのNetにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-27136	2026-06-3 17:05	2026-05-22	Show	GitHub Exploit DB Packet Storm

186	9.8	緊急 Network	Linaro	Open Asymmetric Multi Processing (OpenAMP)	LinaroのOpen Asymmetric Multi Processing (OpenAMP)における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-37540	2026-06-3 17:05	2026-05-1	Show	GitHub Exploit DB Packet Storm

187	9.6	緊急 Network	The Go Project	Net	The Go ProjectのNetにおける安全でない等式による入力の不適切な検証に関する脆弱性	CWE-1289 安全でない等式による入力の不適切な検証	CVE-2026-39821	2026-06-3 17:05	2026-05-22	Show	GitHub Exploit DB Packet Storm

188	7.5	重要 Network	マイクロソフト	Microsoft Planetary Computer Pro (GeoCatalog)	Microsoft Planetary Computer Pro の情報漏えいの脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-41104	2026-06-3 17:04	2026-05-22	Show	GitHub Exploit DB Packet Storm

189	9.6	緊急 Network	charm	Wish	charmのWishにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41589	2026-06-3 17:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

190	9.1	緊急 Network	i18next	i18next-http-backend	i18nextのi18next-http-backendにおける複数の脆弱性	CWE-22 CWE-74	CVE-2026-41691	2026-06-3 17:04	2026-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319281	5.5	MEDIUM Local	-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2022-48936	2024-08-31 15:15	2024-08-22	Show	GitHub Exploit DB Packet Storm

319282	6.6	MEDIUM Local	intel	oneapi_base_toolkit distribution_for_gdb	Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-25562	2024-08-31 12:40	2024-08-14	Show	GitHub Exploit DB Packet Storm

319283	3.3	LOW Local	intel	oneapi_base_toolkit distribution_for_gdb	Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-24973	2024-08-31 12:39	2024-08-14	Show	GitHub Exploit DB Packet Storm

319284	7.8	HIGH Local	intel	oneapi_base_toolkit distribution_for_gdb	Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-276 Incorrect Default Permissions	CVE-2024-23495	2024-08-31 12:38	2024-08-14	Show	GitHub Exploit DB Packet Storm

319285	7.3	HIGH Local	intel	oneapi_base_toolkit distribution_for_gdb	Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-23491	2024-08-31 12:37	2024-08-14	Show	GitHub Exploit DB Packet Storm

319286	5.4	MEDIUM Network	yzncms	yzncms	A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the config…	CWE-79 Cross-site Scripting	CVE-2024-42939	2024-08-31 11:58	2024-08-21	Show	GitHub Exploit DB Packet Storm

319287	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h…	-	CVE-2022-4538	2024-08-31 06:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319288	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h…	-	CVE-2022-4528	2024-08-31 06:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319289	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h…	-	CVE-2022-4412	2024-08-31 06:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319290	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-42379	2024-08-31 05:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed