Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
281 4.3 警告
Network
University at Buffalo Open XDMoD University at BuffaloのOpen XDMoDにおけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-45776 2026-06-11 16:23 2026-06-5 Show GitHub Exploit DB Packet Storm
282 9.8 緊急
Network
University at Buffalo Open XDMoD University at BuffaloのOpen XDMoDにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-45777 2026-06-11 16:23 2026-06-5 Show GitHub Exploit DB Packet Storm
283 5.4 警告
Network
University at Buffalo Open XDMoD University at BuffaloのOpen XDMoDにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-45778 2026-06-11 16:23 2026-06-5 Show GitHub Exploit DB Packet Storm
284 9.8 緊急
Network
University at Buffalo Open XDMoD University at BuffaloのOpen XDMoDにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2026-45779 2026-06-11 16:23 2026-06-5 Show GitHub Exploit DB Packet Storm
285 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-46144 2026-06-11 16:23 2026-05-28 Show GitHub Exploit DB Packet Storm
286 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-46145 2026-06-11 16:23 2026-05-28 Show GitHub Exploit DB Packet Storm
287 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 New CWE-835
無限ループ
CVE-2026-46146 2026-06-11 16:23 2026-05-28 Show GitHub Exploit DB Packet Storm
288 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-46147 2026-06-11 16:23 2026-05-28 Show GitHub Exploit DB Packet Storm
289 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-46148 2026-06-11 16:22 2026-05-28 Show GitHub Exploit DB Packet Storm
290 7.1 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御
CVE-2026-46149 2026-06-11 16:22 2026-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319681 9.8 CRITICAL
Network
nac nacpremium Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection.This issue affects NACPr… CWE-89
SQL Injection
CVE-2024-6919 2024-09-18 00:57 2024-09-3 Show GitHub Exploit DB Packet Storm
319682 6.5 MEDIUM
Network
siemens omnivise_t3000_application_server A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). Affected devices allow au… CWE-22
Path Traversal
CVE-2024-38878 2024-09-18 00:50 2024-08-2 Show GitHub Exploit DB Packet Storm
319683 9.8 CRITICAL
Network
anji-plus report anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitra… NVD-CWE-Other
CVE-2024-7314 2024-09-18 00:45 2024-08-3 Show GitHub Exploit DB Packet Storm
319684 7.8 HIGH
Local
siemens omnivise_t3000_whitelisting_server
omnivise_t3000_thin_client
omnivise_t3000_terminal_server
omnivise_t3000_product_data_management
omnivise_t3000_domain_controller
omnivise_t3000_appl…
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Controller R9.2 (All versions), Omnivise T3000 Product Data Management (PDM) R9.2 (… NVD-CWE-noinfo
CVE-2024-38876 2024-09-17 23:45 2024-08-2 Show GitHub Exploit DB Packet Storm
319685 9.8 CRITICAL
Network
totolink t8_firmware TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter. CWE-120
Classic Buffer Overflow
CVE-2024-46419 2024-09-17 23:35 2024-09-16 Show GitHub Exploit DB Packet Storm
319686 9.8 CRITICAL
Network
totolink t8_firmware TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the desc parameter. CWE-120
Classic Buffer Overflow
CVE-2024-46451 2024-09-17 23:35 2024-09-16 Show GitHub Exploit DB Packet Storm
319687 7.5 HIGH
Network
totolink t8_firmware TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which allows attackers to cause a Denial of Service (DoS) via the File parameter. CWE-120
Classic Buffer Overflow
CVE-2024-46424 2024-09-17 23:35 2024-09-16 Show GitHub Exploit DB Packet Storm
319688 7.5 HIGH
Network
nt-ware uniflow_smartclient
uniflow_online_print_\&_scan
uniflow_online
The registration process of uniFLOW Online (NT-ware product) apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email… NVD-CWE-Other
CVE-2024-1621 2024-09-17 23:12 2024-09-3 Show GitHub Exploit DB Packet Storm
319689 7.8 HIGH
Local
vmware fusion VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnera… NVD-CWE-noinfo
CVE-2024-38811 2024-09-17 22:33 2024-09-3 Show GitHub Exploit DB Packet Storm
319690 9.8 CRITICAL
Network
avtech avm1203_firmware Commands can be injected over the network and executed without authentication. CWE-77
Command Injection
CVE-2024-7029 2024-09-17 22:30 2024-08-3 Show GitHub Exploit DB Packet Storm