Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1941 5.4 警告
Network
nuxt nuxt
nuxt/nitro-server
Nuxtのnuxt/nitro-server等の複数製品における複数の脆弱性 CWE-349
CWE-444
CWE-79
CVE-2026-46342 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
1942 9.8 緊急
Network
Defense Unicorns UDS Identity Config Defense UnicornsのUDS Identity Configにおける複数の脆弱性 CWE-287
CWE-303
CVE-2026-46389 2026-06-16 13:40 2026-06-5 Show GitHub Exploit DB Packet Storm
1943 5.8 警告
Local
Shane Pearman (spearman) unbounded-spsc Shane Pearman (spearman)のunbounded-spscにおける複数の脆弱性 CWE-125
CWE-415
CWE-704
CWE-787
CVE-2026-46690 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
1944 5.3 警告
Network
nuxt nuxt
nuxt/nitro-server
Nuxtのnuxt/nitro-server等の複数製品における複数の脆弱性 CWE-284
CWE-288
CVE-2026-47200 2026-06-16 13:40 2026-06-12 Show GitHub Exploit DB Packet Storm
1945 5.4 警告
Network
マイクロソフト Microsoft Exchange Server
Microsoft Exchange Server Subscription Edition (SE)
Microsoft Exchange Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-47631 2026-06-16 13:40 2026-06-9 Show GitHub Exploit DB Packet Storm
1946 8.2 重要
Network
ERLANG Erlang Runtime System (ERTS)
Erlang/OTP
ERLANGのErlang/OTP等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-49759 2026-06-16 13:40 2026-06-10 Show GitHub Exploit DB Packet Storm
1947 5.5 警告
Local
ERLANG Erl Interface
Erlang/OTP
ERLANGのErl Interface等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-49760 2026-06-16 13:40 2026-06-10 Show GitHub Exploit DB Packet Storm
1948 5.7 警告
Adjacent
nuxt nuxt/webpack-builder
nuxt/rspack-builder
Nuxtのnuxt/rspack-builder等の複数製品における危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開
CVE-2026-49993 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
1949 9.8 緊急
Network
jmespath project jmespath JMESPathにおける複数の脆弱性 CWE-116
CWE-20
CWE-94
CVE-2026-54133 2026-06-16 13:39 2026-06-12 Show GitHub Exploit DB Packet Storm
1950 5.5 警告
Local
- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2025-24165 2026-06-16 13:39 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320691 - - - External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls.Thi… CWE-73
CWE-732
 External Control of File Name or Path
 Incorrect Permission Assignment for Critical Resource
CVE-2024-9142 2024-10-15 01:35 2024-09-25 Show GitHub Exploit DB Packet Storm
320692 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-48251. Reason: This candidate is a reservation duplicate of CVE-2024-48251. Notes: All CVE users should reference CVE-2024-4825… - CVE-2024-48261 2024-10-15 00:15 2024-10-15 Show GitHub Exploit DB Packet Storm
320693 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-40616 2024-10-15 00:15 2024-10-15 Show GitHub Exploit DB Packet Storm
320694 6.5 MEDIUM
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacke… CWE-863
 Incorrect Authorization
CVE-2024-45132 2024-10-14 20:15 2024-10-10 Show GitHub Exploit DB Packet Storm
320695 5.4 MEDIUM
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged at… CWE-863
 Incorrect Authorization
CVE-2024-45131 2024-10-14 20:15 2024-10-10 Show GitHub Exploit DB Packet Storm
320696 5.4 MEDIUM
Network
adobe commerce
magento
commerce_b2b
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged at… CWE-863
 Incorrect Authorization
CVE-2024-45128 2024-10-14 20:15 2024-10-10 Show GitHub Exploit DB Packet Storm
320697 - - - ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of insecure Real-Time Streaming Protocol (RTSP) version for live video streaming. A remote atta… CWE-862
 Missing Authorization
CVE-2024-47790 2024-10-14 20:15 2024-10-4 Show GitHub Exploit DB Packet Storm
320698 - - - ** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in D3D Security IP Camera D8801 due to usage of weak authentication scheme of the HTTP header protocol where authorization tag contain a Base… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2024-47789 2024-10-14 20:15 2024-10-4 Show GitHub Exploit DB Packet Storm
320699 - - - Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Inclusion. This issue affects pretix Widget WordPress plugin: from 1.0.0 through 1.… - CVE-2024-9575 2024-10-14 17:15 2024-10-9 Show GitHub Exploit DB Packet Storm
320700 7.5 HIGH
Network
haproxy haproxy HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions, as expl… NVD-CWE-noinfo
CVE-2024-45506 2024-10-14 12:15 2024-09-5 Show GitHub Exploit DB Packet Storm