Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2561 8.3 重要
Adjacent 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-43291 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
2562 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43292 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
2563 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43293 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
2564 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43294 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
2565 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43295 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
2566 3.7 低
Network 		Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-43514 2026-05-18 12:13 2026-05-12 Show GitHub Exploit DB Packet Storm
2567 7.5 重要
Network 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-43652 2026-05-18 12:13 2026-05-11 Show GitHub Exploit DB Packet Storm
2568 7.5 重要
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい 		CVE-2026-43654 2026-05-18 12:13 2026-05-11 Show GitHub Exploit DB Packet Storm
2569 10 緊急
Network 		vm2 project vm2 vm2 projectのvm2におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-43997 2026-05-18 12:13 2026-05-13 Show GitHub Exploit DB Packet Storm
2570 8.5 重要
Network 		vm2 project vm2 vm2 projectのvm2におけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-43998 2026-05-18 12:13 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319021 6.1 MEDIUM
Network 		eaton foreseer_electrical_power_monitoring_system The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages. However, the input fields for this feature in the Eaton Foreseer software lacked proper input sa… CWE-79
Cross-site Scripting 		CVE-2024-31414 2024-09-20 03:48 2024-09-14 Show GitHub Exploit DB Packet Storm
319022 8.1 HIGH
Network 		lunary lunary A Cross-Site Request Forgery (CSRF) vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create pro… CWE-352
 Origin Validation Error 		CVE-2024-6862 2024-09-20 03:37 2024-09-14 Show GitHub Exploit DB Packet Storm
319023 6.5 MEDIUM
Network 		lunary lunary An information disclosure vulnerability exists in the lunary-ai/lunary, specifically in the `runs/{run_id}/related` endpoint. This endpoint does not verify that the user has the necessary access righ… CWE-1220
 Insufficient Granularity of Access Control 		CVE-2024-6867 2024-09-20 03:28 2024-09-14 Show GitHub Exploit DB Packet Storm
319024 9.8 CRITICAL
Network 		arm mbed_tls An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables optional authentication of the client, if the client-provided certificate does not have appropriate values in… CWE-295
Improper Certificate Validation  		CVE-2024-45159 2024-09-20 03:26 2024-09-6 Show GitHub Exploit DB Packet Storm
319025 4.8 MEDIUM
Network 		peepso peepso The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.4.5.0 due t… CWE-79
Cross-site Scripting 		CVE-2024-7655 2024-09-20 03:20 2024-09-10 Show GitHub Exploit DB Packet Storm
319026 4.8 MEDIUM
Network 		peepso peepso The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, … CWE-79
Cross-site Scripting 		CVE-2024-7618 2024-09-20 03:20 2024-09-10 Show GitHub Exploit DB Packet Storm
319027 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer … CWE-476
 NULL Pointer Dereference 		CVE-2024-46694 2024-09-20 03:16 2024-09-13 Show GitHub Exploit DB Packet Storm
319028 5.4 MEDIUM
Network 		microfocus netiq_access_manager Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects NetIQ Access Manager before 5.0.4.1 and 5.1. CWE-79
Cross-site Scripting 		CVE-2024-4554 2024-09-20 03:15 2024-08-28 Show GitHub Exploit DB Packet Storm
319029 7.1 HIGH
Local 		stripe stripe-cli stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a man… CWE-22
Path Traversal 		CVE-2024-45401 2024-09-20 03:12 2024-09-6 Show GitHub Exploit DB Packet Storm
319030 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpus_read_lock() in pg_net_init() I have seen the WARN_ON(smp_processor_id() != cpu) firing in pktgen_thread_worker()… NVD-CWE-noinfo
CVE-2024-46681 2024-09-20 03:10 2024-09-13 Show GitHub Exploit DB Packet Storm