Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2381 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Painter アドビのAdobe Substance 3D Painterにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-34676 2026-05-14 10:20 2026-05-12 Show GitHub Exploit DB Packet Storm
2382 7.8 重要
Local 		アドビシステムズ Adobe Illustrator アドビのAdobe Illustratorにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-34687 2026-05-14 10:20 2026-05-12 Show GitHub Exploit DB Packet Storm
2383 8.2 重要
Local 		デル insightiq デルのinsightiqにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35071 2026-05-14 10:20 2026-05-12 Show GitHub Exploit DB Packet Storm
2384 9.8 緊急
Network 		デル Dell ObjectScale
elastic cloud storage 		デルのelastic cloud storage等の複数製品におけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2026-35157 2026-05-14 10:20 2026-05-11 Show GitHub Exploit DB Packet Storm
2385 5.4 警告
Network 		Frappe Frappe Frappeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-3673 2026-05-14 10:20 2026-04-22 Show GitHub Exploit DB Packet Storm
2386 9.8 緊急
Network 		Grokability, Inc. Snipe-IT Grokability, Inc.のSnipe-ITにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-37709 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
2387 6.5 警告
Local 		Linux Containers LXC Linux ContainersのLXCにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-39402 2026-05-14 10:19 2026-05-5 Show GitHub Exploit DB Packet Storm
2388 8.8 重要
Network 		Pi-hole FTLDNS Pi-holeのFTLDNSにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-39849 2026-05-14 10:19 2026-05-5 Show GitHub Exploit DB Packet Storm
2389 7.5 重要
Network 		- アップルのmacOSにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ 		CVE-2026-39871 2026-05-14 10:19 2026-05-11 Show GitHub Exploit DB Packet Storm
2390 8.8 重要
Network 		Anthropic PBC Claude Code Anthropic PBCのClaude Codeにおける複数の脆弱性 CWE-20
CWE-77
CWE-noinfo
CVE-2026-40068 2026-05-14 10:19 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311891 - - - An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect p… - CVE-2024-5918 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311892 - - - A server-side request forgery in PAN-OS software enables an unauthenticated attacker to use the administrative web interface as a proxy, which enables the attacker to view internal network resources … - CVE-2024-5917 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311893 - - - Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are rec… CWE-252
 Unchecked Return Value 		CVE-2024-50306 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311894 - - - Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9… CWE-20
 Improper Input Validation  		CVE-2024-50305 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311895 - - - Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22
Path Traversal 		CVE-2024-47916 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311896 - - - VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-200
Information Exposure 		CVE-2024-47915 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311897 - - - VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF) CWE-352
 Origin Validation Error 		CVE-2024-47914 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311898 - - - VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-79
Cross-site Scripting 		CVE-2024-45254 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311899 - - - Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22
Path Traversal 		CVE-2024-45253 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm
311900 - - - Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to … CWE-20
 Improper Input Validation  		CVE-2024-38479 2024-11-15 22:58 2024-11-14 Show GitHub Exploit DB Packet Storm