Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3071 9.1 緊急
Network 		VMware Spring Cloud Config VMwareのSpring Cloud Configにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40982 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
3072 8.1 重要
Network 		VMware Spring Cloud Config VMwareのSpring Cloud ConfigにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41002 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
3073 4.4 警告
Local 		VMware Spring Cloud Config VMwareのSpring Cloud Configにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-41004 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
3074 5.3 警告
Network 		Sync-in Sync-in Server Sync-inのSync-in Serverにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-41161 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3075 5.3 警告
Network 		angular angular angularにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41423 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3076 8.1 重要
Network 		Linux Foundation dapr Linux Foundationのdaprにおける複数の脆弱性 CWE-22
CWE-284
CWE-noinfo
CVE-2026-41491 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3077 7.5 重要
Network 		Loren Segal YARD Loren SegalのYARDにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41493 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3078 3.3 低
Network 		Kimai project kimai Kimai projectのKimaiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41498 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3079 7.4 重要
Network 		go-git project go-git go-git projectのgo-gitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-41506 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3080 8.1 重要
Network 		Andreas Kloeckner RELATE Andreas KloecknerのRELATEにおける複数の脆弱性 CWE-203
CWE-208
CVE-2026-41588 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312351 - - - OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Prior to version 6.1.9, the regex validation used to prevent Introspecti… CWE-284
Improper Access Control 		CVE-2024-37155 2024-11-19 02:11 2024-11-19 Show GitHub Exploit DB Packet Storm
312352 - - - A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to creat… - CVE-2023-39180 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312353 - - - A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the … - CVE-2023-39179 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312354 - - - A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can res… - CVE-2023-39176 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312355 8.8 HIGH
Network 		- - A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS. CWE-306
Missing Authentication for Critical Function 		CVE-2024-41969 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312356 5.4 MEDIUM
Network 		- - A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS. - CVE-2024-41968 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312357 8.1 HIGH
Network 		- - A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack. CWE-306
Missing Authentication for Critical Function 		CVE-2024-41967 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312358 - - - The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a … - CVE-2024-5030 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312359 - - - An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Sit… - CVE-2024-52943 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm
312360 - - - An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Sit… - CVE-2024-52942 2024-11-19 02:11 2024-11-18 Show GitHub Exploit DB Packet Storm