Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2551 7.3 重要
Local 		アクシスコミュニケーションズ AXIS OS アクシスコミュニケーションズのAXIS OSにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性 CWE-1287
指定されたタイプの入力に対する不適切な検証 		CVE-2026-0802 2026-05-21 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
2552 7.3 重要
Local 		アクシスコミュニケーションズ AXIS OS アクシスコミュニケーションズのAXIS OSにおけるパストラバーサルの脆弱性 CWE-35
パストラバーサル 		CVE-2026-0804 2026-05-21 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
2553 8.8 重要
Network 		アクシスコミュニケーションズ AXIS OS アクシスコミュニケーションズのAXIS OSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-1185 2026-05-21 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
2554 6.5 警告
Local 		Xen プロジェクト Xen Xen プロジェクトのXenにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-23557 2026-05-21 10:54 2026-05-19 Show GitHub Exploit DB Packet Storm
2555 7.8 重要
Local 		Xen プロジェクト Xen Xen プロジェクトのXenにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-23558 2026-05-21 10:54 2026-05-19 Show GitHub Exploit DB Packet Storm
2556 4.3 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-28732 2026-05-21 10:54 2026-05-18 Show GitHub Exploit DB Packet Storm
2557 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 		CVE-2026-29207 2026-05-21 10:54 2026-05-19 Show GitHub Exploit DB Packet Storm
2558 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-29220 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2559 7.3 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-29226 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2560 7.5 重要
Network 		HSC MailInspector HSCのMailInspectorにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-29962 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319271 5.5 MEDIUM
Local 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access a user's Photos Library. CWE-281
 Improper Preservation of Permissions 		CVE-2024-40831 2024-09-24 04:18 2024-09-17 Show GitHub Exploit DB Packet Storm
319272 - - - An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 13… - CVE-2024-25073 2024-09-24 04:15 2024-09-11 Show GitHub Exploit DB Packet Storm
319273 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be able to read restricted memory. NVD-CWE-noinfo
CVE-2024-27860 2024-09-24 04:10 2024-09-17 Show GitHub Exploit DB Packet Storm
319274 5.5 MEDIUM
Local 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data. NVD-CWE-noinfo
CVE-2024-40837 2024-09-24 03:50 2024-09-17 Show GitHub Exploit DB Packet Storm
319275 6.5 MEDIUM
Network 		backstage backstage Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak … CWE-22
Path Traversal 		CVE-2024-45816 2024-09-24 03:41 2024-09-18 Show GitHub Exploit DB Packet Storm
319276 6.5 MEDIUM
Network 		backstage backstage Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the s… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2024-45815 2024-09-24 03:31 2024-09-18 Show GitHub Exploit DB Packet Storm
319277 5.4 MEDIUM
Network 		backstage backstage Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inject executable scripts in the TechDocs content th… CWE-79
Cross-site Scripting 		CVE-2024-46976 2024-09-24 03:27 2024-09-18 Show GitHub Exploit DB Packet Storm
319278 6.1 MEDIUM
Network 		google chrome Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts… CWE-79
Cross-site Scripting 		CVE-2024-8907 2024-09-24 03:23 2024-09-18 Show GitHub Exploit DB Packet Storm
319279 6.1 MEDIUM
Network 		oretnom23 resort_reservation_system A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_fee.php. The manipul… CWE-79
Cross-site Scripting 		CVE-2024-8951 2024-09-24 03:12 2024-09-18 Show GitHub Exploit DB Packet Storm
319280 7.5 HIGH
Network 		micropython micropython A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffe… CWE-787
 Out-of-bounds Write 		CVE-2024-8948 2024-09-24 03:10 2024-09-18 Show GitHub Exploit DB Packet Storm