Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2511	6.5	警告 Network	Mem0	mem0	Mem0のmem0における複数の脆弱性	CWE-306 CWE-862	CVE-2026-31244	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

2512	5.3	警告 Network	Mem0	mem0	Mem0のmem0における複数の脆弱性	CWE-306 CWE-862	CVE-2026-31245	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

2513	7.5	重要 Network	マイクロソフト	Copilot Chat (Microsoft Edge)	Copilot Chat (Microsoft Edge) の情報漏えいの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-33111	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

2514	8.1	重要 Network	マイクロソフト	Azure Monitor Action Group Notification System	Azure Monitor のアクショングループの通知システムの特権昇格の脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-41105	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

2515	7.8	重要 Local	マイクロソフト	Kiota	マイクロソフトのKiotaにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41134	2026-05-18 12:05	2026-04-22	Show	GitHub Exploit DB Packet Storm

2516	8.2	重要 Network	Kata Containers	Confidential Containers Kata Containers	Kata ContainersのConfidential Containers等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-41326	2026-05-18 12:05	2026-04-24	Show	GitHub Exploit DB Packet Storm

2517	8.4	重要 Local	opentelemetry	OpenTelemetry eBPF Instrumentation	opentelemetryのOpenTelemetry eBPF Instrumentationにおける複数の脆弱性	CWE-22 CWE-59	CVE-2026-41433	2026-05-18 12:05	2026-04-24	Show	GitHub Exploit DB Packet Storm

2518	5.3	警告 Network	RedwoodSDK	RedwoodSDK	RedwoodjsのRedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-42190	2026-05-18 12:05	2026-05-8	Show	GitHub Exploit DB Packet Storm

2519	7.2	重要 Network	FileMaker, Inc	Claris FileMaker Cloud	Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker Cloudにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-43680	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

2520	7.2	重要 Network	FileMaker, Inc	Claris FileMaker Cloud	Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker CloudにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-43685	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311911	-		-	-	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.	-	CVE-2024-51157	2024-11-19 00:35	2024-11-9	Show	GitHub Exploit DB Packet Storm

311912	7.8	HIGH Local	ivanti	secure_access_client	Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.	NVD-CWE-noinfo	CVE-2024-37398	2024-11-19 00:23	2024-11-13	Show	GitHub Exploit DB Packet Storm

311913	4.9	MEDIUM Network	ivanti	connect_secure policy_secure	A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a…	CWE-787 Out-of-bounds Write	CVE-2024-47909	2024-11-19 00:09	2024-11-13	Show	GitHub Exploit DB Packet Storm

311914	7.5	HIGH Network	ivanti	connect_secure	A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.	CWE-787 Out-of-bounds Write	CVE-2024-47907	2024-11-19 00:09	2024-11-13	Show	GitHub Exploit DB Packet Storm

311915	4.9	MEDIUM Network	ivanti	connect_secure policy_secure	A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a…	CWE-787 Out-of-bounds Write	CVE-2024-47905	2024-11-19 00:08	2024-11-13	Show	GitHub Exploit DB Packet Storm

311916	7.5	HIGH Network	ivanti	avalanche	An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2024-50321	2024-11-19 00:06	2024-11-13	Show	GitHub Exploit DB Packet Storm

311917	7.5	HIGH Network	ivanti	avalanche	An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2024-50320	2024-11-19 00:06	2024-11-13	Show	GitHub Exploit DB Packet Storm

311918	7.5	HIGH Network	ivanti	avalanche	An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2024-50319	2024-11-19 00:06	2024-11-13	Show	GitHub Exploit DB Packet Storm

311919	7.5	HIGH Network	ivanti	avalanche	A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.	CWE-476 NULL Pointer Dereference	CVE-2024-50318	2024-11-19 00:06	2024-11-13	Show	GitHub Exploit DB Packet Storm

311920	7.5	HIGH Network	ivanti	avalanche	A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service.	CWE-476 NULL Pointer Dereference	CVE-2024-50317	2024-11-19 00:06	2024-11-13	Show	GitHub Exploit DB Packet Storm