Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3061 5.4 警告
Network 		TensorOpera FEDML TensorOperaのFEDMLにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-5535 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3062 7.3 重要
Network 		TensorOpera FEDML TensorOperaのFEDMLにおける複数の脆弱性 CWE-20
CWE-502
CVE-2026-5536 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3063 9.8 緊急
Network 		Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-266
CWE-284
CVE-2026-5569 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3064 9.8 緊急
Network 		Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-5570 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3065 7.5 重要
Network 		Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-200
CWE-284
CVE-2026-5571 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3066 4.3 警告
Network 		Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-352
CWE-862
CVE-2026-5572 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3067 9.8 緊急
Network 		Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-284
CWE-434
CVE-2026-5573 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3068 8.6 重要
Network 		Song Li (Song-Li) Cross browser fingerprinting Song Li (Song-Li)のCross browser fingerprintingにおける複数の脆弱性 CWE-74
CWE-89
CWE-89
CVE-2026-5577 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3069 9.8 緊急
Network 		Martin (Fosowl) AgenticSeek Martin (Fosowl)のAgenticSeekにおける複数の脆弱性 CWE-74
CWE-94
CVE-2026-5584 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3070 7.5 重要
Network 		Tencent AI-Infra-Guard TencentのAI-Infra-Guardにおける複数の脆弱性 CWE-200
CWE-284
CWE-noinfo
CVE-2026-5585 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312971 6.9 MEDIUM
Network 		openrefine openrefine OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `export-rows` command can be used in such a way that it reflects part of the request verbatim, with a C… CWE-79
Cross-site Scripting 		CVE-2024-47880 2024-10-31 02:42 2024-10-25 Show GitHub Exploit DB Packet Storm
312972 - - - File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload component. - CVE-2024-48594 2024-10-31 02:35 2024-10-29 Show GitHub Exploit DB Packet Storm
312973 - - - LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php. - CVE-2024-48356 2024-10-31 02:35 2024-10-29 Show GitHub Exploit DB Packet Storm
312974 - - - MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do. - CVE-2024-48177 2024-10-31 02:35 2024-10-29 Show GitHub Exploit DB Packet Storm
312975 - - - SparkShop <=1.1.7 is vulnerable to server-side request forgery (SSRF). This vulnerability allows attacks to scan ports on the Intranet or local network where the server resides, attack applications r… - CVE-2024-48107 2024-10-31 02:35 2024-10-29 Show GitHub Exploit DB Packet Storm
312976 - - - LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php. - CVE-2024-48357 2024-10-31 02:35 2024-10-29 Show GitHub Exploit DB Packet Storm
312977 - - - An issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass through Electromagnetic Fault Injection allows an attacker to successfully authenticate and write to the R… - CVE-2024-31955 2024-10-31 02:35 2024-10-16 Show GitHub Exploit DB Packet Storm
312978 5.3 MEDIUM
Network 		djangoproject django An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to… NVD-CWE-noinfo
CVE-2024-45231 2024-10-31 02:35 2024-10-9 Show GitHub Exploit DB Packet Storm
312979 7.5 HIGH
Network 		djangoproject django An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via ve… NVD-CWE-noinfo
CVE-2024-45230 2024-10-31 02:35 2024-10-9 Show GitHub Exploit DB Packet Storm
312980 7.5 HIGH
Network 		mozilla firefox
thunderbird
firefox_esr 		An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to access cross-origin PDF content. This acces… NVD-CWE-Other
CVE-2024-9393 2024-10-31 02:35 2024-10-2 Show GitHub Exploit DB Packet Storm