Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2911 8.8 重要
Network 		Ivanti Ivanti Endpoint Manager IvantiのIvanti Endpoint ManagerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-8111 2026-05-14 10:14 2026-05-12 Show GitHub Exploit DB Packet Storm
2912 7.5 重要
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8222 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2913 7.5 重要
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8224 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2914 7.5 重要
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8225 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2915 7.5 重要
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8226 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2916 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8229 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2917 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CWE-78
CVE-2026-8230 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2918 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8248 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2919 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8250 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
2920 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8251 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312151 - - - In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privi… - CVE-2024-34729 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
312152 - - - In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User intera… - CVE-2024-34719 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
312153 - - - In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional e… - CVE-2024-31337 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
312154 - - - The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in… - CVE-2024-9413 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
312155 - - - Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted i… CWE-287
CWE-289
Improper Authentication
 Authentication Bypass by Alternate Name 		CVE-2024-51996 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
312156 - - - Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixe… CWE-79
Cross-site Scripting 		CVE-2024-45594 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
312157 - - - A Session Fixation vulnerability exists in chatwoot/chatwoot versions prior to 2.4.0. The application does not invalidate existing sessions on other devices when a user changes their password, allowi… CWE-384
 Session Fixation 		CVE-2021-3740 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
312158 - - - The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from runn… - CVE-2024-9529 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
312159 - - - The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting att… - CVE-2024-10104 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
312160 - - - A heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to cause Denial of Service (DoS) via a crafted MKV video file. - CVE-2024-41217 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm