Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2901	4.8	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-3495	2026-05-21 10:53	2026-05-18	Show	GitHub Exploit DB Packet Storm

2902	6.5	警告 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-35086	2026-05-21 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

2903	8.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office クイック実行の特権の昇格の脆弱性	CWE-1220 アクセス制御の不十分な粒度	CVE-2026-35436	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

2904	5.5	警告 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Microsoft Word Office Long Term Servicing Channel (LTSC)	Microsoft Word の情報漏えいの脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-35440	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

2905	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-3637	2026-05-21 10:52	2026-05-18	Show	GitHub Exploit DB Packet Storm

2906	9.8	緊急 Network	H2O.ai	H2O	H2O.aiのH2Oにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-3960	2026-05-21 10:52	2026-04-23	Show	GitHub Exploit DB Packet Storm

2907	8.4	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office のリモートコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-40358	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

2908	7.8	重要 Local	マイクロソフト	Microsoft Office Online Server Microsoft Excel Microsoft Office Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-40359	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

2909	7.8	重要 Local	マイクロソフト	Microsoft Office Online Server Microsoft Excel Microsoft Office Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps	Microsoft Excel の情報漏えいの脆弱性	CWE-125 境界外読み取り	CVE-2026-40360	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

2910	8.4	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Microsoft Word Office Long Term Servicing Channel (LTSC)	Microsoft Word のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-40361	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319121	-	-	-	Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.	-	CVE-2024-44540	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319122	-	-	-	A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via create user form inputs.	-	CVE-2024-39843	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319123	-	-	-	A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs.	-	CVE-2024-39842	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319124	-	-	-	Entrust Instant Financial Issuance (formerly known as Cardwizard) 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library (i.e. DCG.Security.dll) with a custom AES encryption process th…	-	CVE-2024-39342	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319125	-	-	-	A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code via the skin parameter in the about.js…	-	CVE-2023-46948	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319126	-	-	-	pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthor…	-	CVE-2024-9014	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319127	-	-	-	An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote att…	-	CVE-2024-40442	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319128	-	-	-	An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote att…	-	CVE-2024-40441	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319129	-	-	-	A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 allows attackers to escalate privileges and write arbitrary files.	-	CVE-2024-41228	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

319130	-	-	-	A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.	-	CVE-2024-34331	2024-09-26 22:32	2024-09-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed