Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2541 4.3 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-3636 2026-05-28 14:42 2026-05-22 Show GitHub Exploit DB Packet Storm
2542 6.5 警告
Network 		The Go Project crypto The Go Projectのcryptoにおける通信チャネルで送信中のメッセージの整合性への不適切な強制に関する脆弱性 CWE-924
通信チャネルで送信中のメッセージの整合性への不適切な強制 		CVE-2026-39827 2026-05-28 14:42 2026-05-22 Show GitHub Exploit DB Packet Storm
2543 3.3 低
Local 		Artifex Software MuPDF Artifex SoftwareのMuPDFにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化 		CVE-2026-40505 2026-05-28 14:42 2026-04-16 Show GitHub Exploit DB Packet Storm
2544 7.5 重要
Network 		NLnet Labs unbound NLnet Labsのunboundにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-40622 2026-05-28 14:42 2026-05-20 Show GitHub Exploit DB Packet Storm
2545 4.8 警告
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41999 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
2546 8.6 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-42000 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
2547 7.5 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-42001 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
2548 7.5 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるシグナルハンドラの競合状態に関する脆弱性 CWE-364
シグナルハンドラの競合状態 		CVE-2026-42002 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
2549 8.8 重要
Network 		Project Jupyter JupyterLab Project JupyterのJupyterLabにおける複数の脆弱性 CWE-602
CWE-88
CVE-2026-42266 2026-05-28 14:42 2026-05-13 Show GitHub Exploit DB Packet Storm
2550 6.5 警告
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-42396 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319601 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix the Out-of-bounds read warning using index i - 1U may beyond element index for mc_data[] when i = 0. CWE-125
Out-of-bounds Read 		CVE-2024-46731 2024-09-26 22:29 2024-09-18 Show GitHub Exploit DB Packet Storm
319602 5.4 MEDIUM
Network 		puma puma Puma is a Ruby/Rack web server built for parallelism. In affected versions clients could clobber values set by intermediate proxies (such as X-Forwarded-For) by providing a underscore version of the … CWE-444
HTTP Request Smuggling 		CVE-2024-45614 2024-09-26 22:28 2024-09-20 Show GitHub Exploit DB Packet Storm
319603 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign linear_pitch_alignment even for VM [Description] Assign linear_pitch_alignment so we don't cause a divide… CWE-369
 Divide By Zero 		CVE-2024-46732 2024-09-26 22:28 2024-09-18 Show GitHub Exploit DB Packet Storm
319604 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() mwifiex_get_priv_by_id() returns the priv pointer correspond… CWE-476
 NULL Pointer Dereference 		CVE-2024-46755 2024-09-26 22:25 2024-09-18 Show GitHub Exploit DB Packet Storm
319605 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ice: protect XDP configuration with a mutex The main threat to data consistency in ice_xdp() is a possible asynchronous PF reset.… CWE-476
 NULL Pointer Dereference 		CVE-2024-46765 2024-09-26 22:24 2024-09-18 Show GitHub Exploit DB Packet Storm
319606 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently napi_disable() gets called during rxq and txq clean… CWE-908
 Use of Uninitialized Resource 		CVE-2024-46784 2024-09-26 22:21 2024-09-18 Show GitHub Exploit DB Packet Storm
319607 - - - Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived chan… - CVE-2024-47145 2024-09-26 17:15 2024-09-26 Show GitHub Exploit DB Packet Storm
319608 - - - Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a pe… - CVE-2024-47003 2024-09-26 17:15 2024-09-26 Show GitHub Exploit DB Packet Storm
319609 - - - Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denylist, which allows an attacker to possibly cause an SSRF if Mattermost was deploy… - CVE-2024-45843 2024-09-26 17:15 2024-09-26 Show GitHub Exploit DB Packet Storm
319610 - - - User interface (UI) misrepresentation of critical information issue exists in multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION. If this vulnerabi… - CVE-2024-47045 2024-09-26 13:15 2024-09-26 Show GitHub Exploit DB Packet Storm