Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2411 9.8 緊急
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2018-25357 2026-05-29 11:19 2026-05-23 Show GitHub Exploit DB Packet Storm
2412 6.1 警告
Network 		Moodle Moodle Moodleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2022-50943 2026-05-29 11:19 2026-05-10 Show GitHub Exploit DB Packet Storm
2413 4.3 警告
Network 		WSO2 WSO2 Identity Server
Identity Server as Key Manager
WSO2 Open Banking IAM 		WSO2のWSO2 Identity Server等の複数製品におけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい 		CVE-2024-0391 2026-05-29 11:19 2026-05-11 Show GitHub Exploit DB Packet Storm
2414 8.6 重要
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-10470 2026-05-29 11:19 2026-05-11 Show GitHub Exploit DB Packet Storm
2415 7.3 重要
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-10908 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
2416 5.5 警告
Local 		IBM IBM DB2 IBMのIBM DB2におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2025-13755 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2417 5.5 警告
Local 		- アップルのmacOSにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2025-43289 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2418 5.5 警告
Local 		- アップルのmacOSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2025-43290 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2419 7.8 重要
Local 		- アップルのmacOSにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2025-43306 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
2420 5.5 警告
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-43451 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319721 9.8 CRITICAL
Network 		tenda ac15_firmware Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request. CWE-77
Command Injection 		CVE-2023-36103 2024-09-25 03:10 2024-09-11 Show GitHub Exploit DB Packet Storm
319722 4.3 MEDIUM
Network 		jetbrains youtrack In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project CWE-863
 Incorrect Authorization 		CVE-2024-47159 2024-09-25 03:09 2024-09-20 Show GitHub Exploit DB Packet Storm
319723 7.8 HIGH
Local 		samsung exynos_1480_firmware
exynos_2400_firmware 		An issue was discovered in Samsung Mobile Processor Exynos 1480, Exynos 2400. The xclipse amdgpu driver has a reference count bug. This can lead to a use after free. CWE-416
 Use After Free 		CVE-2024-31960 2024-09-25 03:08 2024-09-11 Show GitHub Exploit DB Packet Storm
319724 5.3 MEDIUM
Network 		jetbrains youtrack In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible CWE-863
 Incorrect Authorization 		CVE-2024-47160 2024-09-25 03:03 2024-09-20 Show GitHub Exploit DB Packet Storm
319725 5.5 MEDIUM
Local 		apple macos An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. NVD-CWE-noinfo
CVE-2024-44186 2024-09-25 03:03 2024-09-17 Show GitHub Exploit DB Packet Storm
319726 5.5 MEDIUM
Local 		apple macos A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read arbitrary files. CWE-22
Path Traversal 		CVE-2024-44190 2024-09-25 03:02 2024-09-17 Show GitHub Exploit DB Packet Storm
319727 5.3 MEDIUM
Network 		jetbrains youtrack In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page CWE-522
 Insufficiently Protected Credentials 		CVE-2024-47162 2024-09-25 02:57 2024-09-20 Show GitHub Exploit DB Packet Storm
319728 9.8 CRITICAL
Network 		pharmacy_management_system_project pharmacy_management_system A vulnerability has been found in code-projects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php?action=editSalesman. The mani… CWE-89
SQL Injection 		CVE-2024-8146 2024-09-25 02:00 2024-08-25 Show GitHub Exploit DB Packet Storm
319729 5.5 MEDIUM
Local 		apple macos This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access sensitive data … NVD-CWE-noinfo
CVE-2024-44182 2024-09-25 01:52 2024-09-17 Show GitHub Exploit DB Packet Storm
319730 6.1 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability … CWE-601
Open Redirect 		CVE-2024-4283 2024-09-25 01:51 2024-09-17 Show GitHub Exploit DB Packet Storm