Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2091 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-33112 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
2092 6.1 警告
Network 		stirlingpdf stirling pdf stirlingpdfのstirling pdfにおける複数の脆弱性 CWE-116
CWE-20
CWE-79
CWE-79
CVE-2026-33436 2026-05-15 11:03 2026-04-17 Show GitHub Exploit DB Packet Storm
2093 6.1 警告
Local 		The Go Project image The Go Projectのimageにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33812 2026-05-15 11:03 2026-04-21 Show GitHub Exploit DB Packet Storm
2094 7.5 重要
Network 		The Go Project image The Go Projectのimageにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-33813 2026-05-15 11:03 2026-04-21 Show GitHub Exploit DB Packet Storm
2095 7.5 重要
Network 		The Go Project Go
http2 		The Go ProjectのGo等の複数製品における無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-33814 2026-05-15 11:03 2026-05-7 Show GitHub Exploit DB Packet Storm
2096 6.1 警告
Network 		MediaWiki MediaWiki MediaWikiにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-34095 2026-05-15 11:03 2026-05-11 Show GitHub Exploit DB Packet Storm
2097 9.8 緊急
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-34187 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
2098 7.8 重要
Local 		アドビシステムズ Adobe Premiere Pro アドビのAdobe Premiere Proにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-34636 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
2099 7.8 重要
Local 		アドビシステムズ Adobe Premiere Pro アドビのAdobe Premiere Proにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-34637 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
2100 7.8 重要
Local 		アドビシステムズ Adobe Premiere Pro アドビのAdobe Premiere Proにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-34638 2026-05-15 11:03 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311661 6.1 MEDIUM
Network 		airties air4443_firmware Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting (XSS).This issue affects Air4443 Firm… CWE-79
Cross-site Scripting 		CVE-2024-9477 2024-11-16 07:54 2024-11-14 Show GitHub Exploit DB Packet Storm
311662 5.4 MEDIUM
Network 		siemens ozw672_firmware
ozw772_firmware 		A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2). The user accounts tab of affected devices is vulnerable to stored cross-site scripting (XSS) attacks… CWE-79
Cross-site Scripting 		CVE-2024-36140 2024-11-16 07:53 2024-11-12 Show GitHub Exploit DB Packet Storm
311663 4.8 MEDIUM
Network 		publiccms publiccms A vulnerability was found in Public CMS 5.202406.d and classified as problematic. This issue affects some unknown processing of the file /admin/cmsVote/save of the component Voting Management. The ma… CWE-79
Cross-site Scripting 		CVE-2024-11175 2024-11-16 07:50 2024-11-14 Show GitHub Exploit DB Packet Storm
311664 7.8 HIGH
Local 		siemens spectrum_power_7 A vulnerability has been identified in Spectrum Power 7 (All versions < V24Q3). The affected product contains several root-owned SUID binaries that could allow an authenticated local attacker to esca… NVD-CWE-noinfo
CVE-2024-29119 2024-11-16 07:50 2024-11-12 Show GitHub Exploit DB Packet Storm
311665 7.2 HIGH
Network 		timgeyssens ui-o-matic A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. This vulnerability affects unknown code of the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r. T… CWE-89
SQL Injection 		CVE-2024-11124 2024-11-16 07:47 2024-11-12 Show GitHub Exploit DB Packet Storm
311666 - - - Sercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting (XSS) via the firmware update page. - CVE-2021-27703 2024-11-16 07:35 2024-11-13 Show GitHub Exploit DB Packet Storm
311667 - - - Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard. - CVE-2021-27702 2024-11-16 07:35 2024-11-13 Show GitHub Exploit DB Packet Storm
311668 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when computing alen in udf_current_aext to mitigate later uni… CWE-908
 Use of Uninitialized Resource 		CVE-2024-50143 2024-11-16 07:22 2024-11-7 Show GitHub Exploit DB Packet Storm
311669 - - - Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetooth Core Specifications 2.1 through 5.3 may permit an unauthenticated man-in-the… - CVE-2021-37577 2024-11-16 06:35 2024-10-2 Show GitHub Exploit DB Packet Storm
311670 - - - Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This issue affects: ?Product Affected Versions LoadMaster Fro… CWE-20
 Improper Input Validation  		CVE-2024-8755 2024-11-16 06:15 2024-10-12 Show GitHub Exploit DB Packet Storm