Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2381 10 緊急
Network
vm2 project vm2 vm2 projectのvm2におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-44006 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
2382 9.1 緊急
Network
vm2 project vm2 vm2 projectのvm2におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-44007 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
2383 9.8 緊急
Network
vm2 project vm2 vm2 projectのvm2における誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2026-44008 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
2384 9.8 緊急
Network
vm2 project vm2 vm2 projectのvm2における誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2026-44009 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
2385 9.9 緊急
Network
nginxui Nginx UI Nginx UI TeamのNginx UIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44015 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2386 7.1 重要
Network
M2-Team NanaZip M2-TeamのNanaZipにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-44215 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2387 7.5 重要
Network
vLLM vLLM vLLMにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2026-44222 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2388 6.5 警告
Network
vLLM vLLM vLLMにおける複数の脆弱性 CWE-131
CWE-704
CVE-2026-44223 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2389 8.8 重要
Network
requarks Wiki.js requarksのWiki.jsにおける権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-44224 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
2390 6.5 警告
Network
warpgate project warpgate Warpgate projectのWarpgateにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-44347 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311721 8.4 HIGH
Local
- - A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of s… CWE-22
Path Traversal
CVE-2020-26071 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
311722 - - - OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Prior to version 6.1.9, the regex validation used to prevent Introspecti… CWE-284
Improper Access Control
CVE-2024-37155 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
311723 - - - A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to creat… - CVE-2023-39180 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
311724 - - - A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the … - CVE-2023-39179 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
311725 - - - A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can res… - CVE-2023-39176 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
311726 8.8 HIGH
Network
- - A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS. CWE-306
Missing Authentication for Critical Function
CVE-2024-41969 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
311727 5.4 MEDIUM
Network
- - A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS. - CVE-2024-41968 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
311728 8.1 HIGH
Network
- - A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack. CWE-306
Missing Authentication for Critical Function
CVE-2024-41967 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
311729 - - - The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a … - CVE-2024-5030 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
311730 - - - An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Sit… - CVE-2024-52943 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm