Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2451	8.2	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43233	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2452	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43234	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2453	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43235	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2454	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43236	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2455	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43237	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2456	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2026-43238	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2457	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43239	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2458	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43250	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2459	4.7	警告 Local	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-43659	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

2460	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-43660	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318721	4.8	MEDIUM Network	micro.company	collect.chat	The Chatbot for WordPress by Collect.chat ?? WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Sit…	CWE-79 Cross-site Scripting	CVE-2024-6498	2024-09-7 02:35	2024-08-5	Show	GitHub Exploit DB Packet Storm

318722	8.6	HIGH Network	rocket.chat	rocket.chat	A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-39713	2024-09-7 02:35	2024-08-5	Show	GitHub Exploit DB Packet Storm

318723	-		-	-	The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive informati…	-	CVE-2024-6477	2024-09-7 02:35	2024-08-3	Show	GitHub Exploit DB Packet Storm

318724	7.2	HIGH Network	teamt5	threatsonar_anti-ransomware	ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, w…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-7694	2024-09-7 02:24	2024-08-12	Show	GitHub Exploit DB Packet Storm

318725	5.4	MEDIUM Network	wpextended	wp_extended	The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.0.8 via the duplicate_post function due…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-8123	2024-09-7 02:20	2024-09-4	Show	GitHub Exploit DB Packet Storm

318726	6.1	MEDIUM Network	cisco	unified_communications_manager	A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could a…	CWE-79 Cross-site Scripting	CVE-2024-20488	2024-09-7 02:18	2024-08-22	Show	GitHub Exploit DB Packet Storm

318727	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-45294. Reason: This candidate is a duplicate of CVE-2024-45294. Notes: All CVE users should reference CVE-2024-452…	-	CVE-2024-45295	2024-09-7 02:15	2024-09-7	Show	GitHub Exploit DB Packet Storm

318728	-		-	-	The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator), for the Fast Healthcare Interoperability Resources (FHIR) specification. Prio…	-	CVE-2024-45294	2024-09-7 02:15	2024-09-7	Show	GitHub Exploit DB Packet Storm

318729	9.8	CRITICAL Network	mozilla	thunderbird firefox_esr firefox	Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could…	CWE-787 Out-of-bounds Write	CVE-2024-8387	2024-09-7 02:15	2024-09-3	Show	GitHub Exploit DB Packet Storm

318730	9.8	CRITICAL Network	mozilla	firefox firefox_esr	A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2…	CWE-843 Type Confusion	CVE-2024-8385	2024-09-7 02:15	2024-09-3	Show	GitHub Exploit DB Packet Storm