Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2061	7.5	重要 Network	アップル	tvOS iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28940	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2062	7.1	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28941	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2063	6.5	警告 Network		-	アップルのmacOSにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-28946	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2064	8.8	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-28947	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2065	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-28952	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2066	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28955	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2067	6.5	警告 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における複数の脆弱性	CWE-125 CWE-787	CVE-2026-28956	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2068	3.3	低 Local	アップル	visionos iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28957	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2069	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-28959	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

2070	4.6	警告 Physics	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性	CWE-359 認可されていないアクターへの個人情報の漏えい	CVE-2026-28963	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318941	6.1	MEDIUM Network	xiebruce	picuploader	A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted pay…	CWE-79 Cross-site Scripting	CVE-2024-44794	2024-09-6 03:28	2024-08-27	Show	GitHub Exploit DB Packet Storm

318942	6.1	MEDIUM Network	gazelle_project	gazelle	A cross-site scripting (XSS) vulnerability in the component /managers/multiple_freeleech.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload …	CWE-79 Cross-site Scripting	CVE-2024-44793	2024-09-6 03:28	2024-08-27	Show	GitHub Exploit DB Packet Storm

318943	6.1	MEDIUM Network	gazelle_project	gazelle	A cross-site scripting (XSS) vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into…	CWE-79 Cross-site Scripting	CVE-2024-44795	2024-09-6 03:26	2024-08-27	Show	GitHub Exploit DB Packet Storm

318944	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: disallow setting special AP channel widths Setting the AP channel width is meant for use with the normal 20/40/...…	NVD-CWE-noinfo	CVE-2024-43912	2024-09-6 03:19	2024-08-26	Show	GitHub Exploit DB Packet Storm

318945	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: nvme: apple: fix device reference counting Drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl. Split the alloca…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2024-43913	2024-09-6 03:12	2024-08-26	Show	GitHub Exploit DB Packet Storm

318946	7.1	HIGH Local	samsung	android	Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded applications.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2024-34638	2024-09-6 03:05	2024-09-4	Show	GitHub Exploit DB Packet Storm

318947	5.5	MEDIUM Local	samsung	android	Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and Android 14 allows local attackers to bypass restrictions on…	NVD-CWE-Other	CVE-2024-34637	2024-09-6 03:05	2024-09-4	Show	GitHub Exploit DB Packet Storm

318948	4.6	MEDIUM Physics	samsung	android	Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege.	CWE-22 Path Traversal	CVE-2024-34653	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

318949	5.5	MEDIUM Local	samsung	android	Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.	CWE-276 Incorrect Default Permissions	CVE-2024-34648	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

318950	3.3	LOW Local	samsung	android	Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of process expiration.	NVD-CWE-Other	CVE-2024-34640	2024-09-6 03:04	2024-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed