Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2371 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-9078 2026-06-3 15:33 2026-05-25 Show GitHub Exploit DB Packet Storm
2372 8.8 重要
Network 		Tanium Tanium Connect TaniumのTanium ConnectにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-9207 2026-06-3 15:33 2026-05-27 Show GitHub Exploit DB Packet Storm
2373 5.5 警告
Local 		GPAC GPAC GPACにおける複数の脆弱性 CWE-401
CWE-404
CVE-2026-9572 2026-06-3 15:33 2026-05-26 Show GitHub Exploit DB Packet Storm
2374 4.3 警告
Network 		Jenkins プロジェクト Multijob JenkinsのMultijobにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-9674 2026-06-3 15:33 2026-05-27 Show GitHub Exploit DB Packet Storm
2375 4.3 警告
Network 		Zoho Zoho Mail for WordPress WordPress用プラグインZoho Mail for WordPressにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-8174 2026-06-3 12:07 2026-06-3 Show GitHub Exploit DB Packet Storm
2376 5 警告
Local 		キヤノン株式会社 CUPS Printer Driver for macOS
My Image Garden for macOS 		キヤノン製My Image Garden for macOSおよびCUPS Printer Driver for macOSにおけるファイルアクセス時のリンク解釈が不適切な脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-6891
CVE-2026-6892 		2026-06-1 14:21 2026-05-29 Show GitHub Exploit DB Packet Storm
2377 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月28日） - - 2026-06-1 14:21 2026-05-29 Show GitHub Exploit DB Packet Storm
2378 7.8 重要
Local 		エフサステクノロジーズ株式会社 ServerView Agents for Windows ServerView Agents for Windowsにおける複数の脆弱性 CWE-Other
その他 		CVE-2026-27788
CVE-2026-32325 		2026-06-1 12:15 2026-06-1 Show GitHub Exploit DB Packet Storm
2379 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月26日） - - 2026-05-29 15:44 2026-05-27 Show GitHub Exploit DB Packet Storm
2380 - - Casbin Casdoor Casdoorにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-6815 2026-05-29 15:44 2026-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319641 6.1 MEDIUM
Network 		ibericode mailchimp The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email' parameter when a placeholder such as {email} is used for the field in versions … CWE-79
Cross-site Scripting 		CVE-2024-8850 2024-09-26 03:49 2024-09-19 Show GitHub Exploit DB Packet Storm
319642 8.8 HIGH
Network 		jeanmarc77 123solar A vulnerability was found in jeanmarc77 123solar 1.8.4.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file config/config_invt1.php. The manipulation of … CWE-94
Code Injection 		CVE-2024-9006 2024-09-26 03:44 2024-09-20 Show GitHub Exploit DB Packet Storm
319643 5.4 MEDIUM
Network 		jeanmarc77 123solar A vulnerability classified as problematic has been found in jeanmarc77 123solar 1.8.4.5. This affects an unknown part of the file /detailed.php. The manipulation of the argument date1 leads to cross … CWE-79
Cross-site Scripting 		CVE-2024-9007 2024-09-26 03:40 2024-09-20 Show GitHub Exploit DB Packet Storm
319644 5.3 MEDIUM
Network 		overleaf overleaf Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 (or 4.2.7 for the 4.x series) contain a vulnerability that allows an arbitrary lan… CWE-74
Injection 		CVE-2024-45312 2024-09-26 03:37 2024-09-3 Show GitHub Exploit DB Packet Storm
319645 6.0 MEDIUM
Network 		fortinet forticlient_endpoint_management_server A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiClientEMS versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.0 through 6.4.9, 6.2.0 through 6.2.… CWE-22
Path Traversal 		CVE-2024-21753 2024-09-26 03:36 2024-09-11 Show GitHub Exploit DB Packet Storm
319646 5.4 MEDIUM
Network 		overleaf overleaf Overleaf is a web-based collaborative LaTeX editor. When installing Server Pro using the Overleaf Toolkit from before 2024-07-17 or legacy docker-compose.yml from before 2024-08-28, the configuration… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2024-45313 2024-09-26 03:12 2024-09-3 Show GitHub Exploit DB Packet Storm
319647 6.5 MEDIUM
Network 		opendaylight model-driven_service_abstraction_layer In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment. NVD-CWE-noinfo
CVE-2024-46942 2024-09-26 03:08 2024-09-16 Show GitHub Exploit DB Packet Storm
319648 5.4 MEDIUM
Network 		workdo crmgo_saas A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes lead… CWE-79
Cross-site Scripting 		CVE-2024-9030 2024-09-26 03:01 2024-09-20 Show GitHub Exploit DB Packet Storm
319649 9.8 CRITICAL
Network 		cellopoint secure_email_gateway Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing aut… CWE-787
 Out-of-bounds Write 		CVE-2024-9043 2024-09-26 02:54 2024-09-20 Show GitHub Exploit DB Packet Storm
319650 9.8 CRITICAL
Network 		medialibs webo-facto The Webo-facto plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.40 due to insufficient restriction on the 'doSsoAuthentification' function. This makes it… NVD-CWE-noinfo
CVE-2024-8853 2024-09-26 02:49 2024-09-20 Show GitHub Exploit DB Packet Storm