Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3271 5.3 警告
Network
asrmicro ASR1901 Firmware
ASR1903 Firmware
asrmicroのASR1901 Firmware等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-42800 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
3272 7.5 重要
Network
OpenStack Ironic Python Agent OpenStackのIronic Python Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-43003 2026-05-7 11:29 2026-05-1 Show GitHub Exploit DB Packet Storm
3273 5.9 警告
Network
PerlDancer Dancer::Session::Abstract PerlDancerのDancer::Session::Abstractにおける複数の脆弱性 CWE-338
CWE-340
CVE-2026-5080 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
3274 5.5 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-5475 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
3275 4.6 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-189
CWE-190
CVE-2026-5476 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
3276 7.8 重要
Local
IBM IBM Turbonomic Prometurbo agent IBMのIBM Turbonomic Prometurbo agentにおける権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-6389 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
3277 5.5 警告
Local
レッドハット multicluster engine for Kubernetes レッドハットのmulticluster engine for Kubernetesにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2026-7163 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
3278 7.2 重要
Network
Amazon.com, Inc. Amazon ECS container agent Amazon.com, Inc.のAmazon ECS container agentにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-7461 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
3279 6.5 警告
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるHTTPレスポンスの分割に関する脆弱性 CWE-443
CWE-Other
CVE-2026-33523 2026-05-7 11:29 2026-05-4 Show GitHub Exploit DB Packet Storm
3280 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける不適切な短絡評価に関する脆弱性 CWE-768
不適切な短絡評価
CVE-2026-35378 2026-05-7 11:29 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317821 4.7 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race Ensure that `i2c_lock' is held when setting interrupt latch and mask in pca95… CWE-667
 Improper Locking
CVE-2024-42253 2024-09-6 22:38 2024-08-8 Show GitHub Exploit DB Packet Storm
317822 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON() can be hit in the wild, it shouldn't be a BUG_ON() For reference, this has … CWE-617
 Reachable Assertion
CVE-2024-42252 2024-09-6 22:37 2024-08-8 Show GitHub Exploit DB Packet Storm
317823 9.1 CRITICAL
Network
huawei emui
harmonyos
Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. CWE-22
Path Traversal
CVE-2024-45443 2024-09-6 22:33 2024-09-4 Show GitHub Exploit DB Packet Storm
317824 4.3 MEDIUM
Network
salesagility suitecrm SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Ver… NVD-CWE-Other
CVE-2024-45392 2024-09-6 22:24 2024-09-6 Show GitHub Exploit DB Packet Storm
317825 6.1 MEDIUM
Network
angeljudesuarez event_management_system Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php. CWE-79
Cross-site Scripting
CVE-2024-44728 2024-09-6 22:23 2024-09-6 Show GitHub Exploit DB Packet Storm
317826 6.1 MEDIUM
Network
1e platform The 1E Platform's component utilized the third-party Duende Identity Server, which suffered from an open redirect vulnerability, permitting an attacker to control the redirection path of end users. … CWE-601
Open Redirect
CVE-2024-7211 2024-09-6 22:23 2024-08-2 Show GitHub Exploit DB Packet Storm
317827 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below bug was reported on a non-SMP kernel: [ 275.267158][ T4335] ------------[ cu… CWE-617
 Reachable Assertion
CVE-2024-42251 2024-09-6 22:21 2024-08-8 Show GitHub Exploit DB Packet Storm
317828 9.8 CRITICAL
Network
angeljudesuarez event_management_system Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php. CWE-89
SQL Injection
CVE-2024-44727 2024-09-6 22:15 2024-09-6 Show GitHub Exploit DB Packet Storm
317829 9.1 CRITICAL
Network
mindsdb mindsdb MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-24759 2024-09-6 22:06 2024-09-6 Show GitHub Exploit DB Packet Storm
317830 8.1 HIGH
Network
ibm aspera_faspex IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification. NVD-CWE-noinfo
CVE-2024-45098 2024-09-6 22:01 2024-09-6 Show GitHub Exploit DB Packet Storm