Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2331 9.9 緊急
Network 		Electric Sheep Fencing pfSense Electric Sheep FencingのpfSenseにおける複数の脆弱性 CWE-284
CWE-915
CVE-2025-69691 2026-05-14 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
2332 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71271 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2333 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2025-71272 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2334 4.7 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2025-71274 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2335 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-71285 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2336 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71286 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2337 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-71294 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2338 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-71295 2026-05-14 10:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2339 5.5 警告
Local 		- アップルのmacOSにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-20696 2026-05-14 10:22 2026-05-11 Show GitHub Exploit DB Packet Storm
2340 6.7 警告
Local 		デル Dell ObjectScale
elastic cloud storage 		デルのelastic cloud storage等の複数製品における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-26946 2026-05-14 10:22 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312001 9.8 CRITICAL
Network 		1000projects beauty_parlour_management_system A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. This issue affects some unknown processing of the file /admin/admin-profile.ph… CWE-89
SQL Injection 		CVE-2024-11055 2024-11-15 00:18 2024-11-11 Show GitHub Exploit DB Packet Storm
312002 6.1 MEDIUM
Network 		10web form_maker The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate esc… CWE-79
Cross-site Scripting 		CVE-2024-10265 2024-11-15 00:17 2024-11-10 Show GitHub Exploit DB Packet Storm
312003 5.5 MEDIUM
Local 		razormist student_record_management_system A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulati… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2024-11097 2024-11-15 00:14 2024-11-12 Show GitHub Exploit DB Packet Storm
312004 6.1 MEDIUM
Network 		opensuse mirrorcache A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the  … CWE-79
Cross-site Scripting 		CVE-2024-49505 2024-11-15 00:13 2024-11-14 Show GitHub Exploit DB Packet Storm
312005 5.4 MEDIUM
Network 		apple iphone_os
ipados
watchos
visionos
tvos
macos
safari 		The issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, watchOS 11.1, visionOS 2.1, macOS Sequoia 15.1, Safari 18.1. Pr… NVD-CWE-noinfo
CVE-2024-44296 2024-11-14 23:58 2024-10-29 Show GitHub Exploit DB Packet Storm
312006 7.3 HIGH
Network 		wppa wp_photo_album_plus The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This … CWE-94
Code Injection 		CVE-2024-10958 2024-11-14 23:57 2024-11-10 Show GitHub Exploit DB Packet Storm
312007 8.8 HIGH
Network 		tendacn g3_firmware Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function. CWE-787
 Out-of-bounds Write 		CVE-2024-50854 2024-11-14 23:43 2024-11-14 Show GitHub Exploit DB Packet Storm
312008 9.8 CRITICAL
Network 		anisha job_recruitment A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email le… CWE-89
SQL Injection 		CVE-2024-11099 2024-11-14 23:37 2024-11-12 Show GitHub Exploit DB Packet Storm
312009 5.5 MEDIUM
Local 		adobe audition Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by… CWE-125
Out-of-bounds Read 		CVE-2024-47449 2024-11-14 23:32 2024-11-13 Show GitHub Exploit DB Packet Storm
312010 5.9 MEDIUM
Network 		neomutt
mutt
redhat 		neomutt
mutt
enterprise_linux 		In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of th… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2024-49393 2024-11-14 23:31 2024-11-12 Show GitHub Exploit DB Packet Storm