Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3321 5.4 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-8003 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
3322 4.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-8004 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
3323 4.3 警告
Adjacent
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-8005 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
3324 9.1 緊急
Network
日立ヴァンタラ Pentaho Data Integration and Analytics 日立ヴァンタラのPentaho Data Integration and Analyticsにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-11158 2026-05-8 12:12 2026-03-10 Show GitHub Exploit DB Packet Storm
3325 7.8 重要
Local
Mobatek MobaXterm MobatekのMobaXtermにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2026-25866 2026-05-8 12:12 2026-03-9 Show GitHub Exploit DB Packet Storm
3326 8.8 重要
Network
Quantum Networks QN-I-470 Firmware Quantum NetworksのQN-I-470 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-41036 2026-05-8 12:11 2026-04-21 Show GitHub Exploit DB Packet Storm
3327 8.8 重要
Adjacent
Quantum Networks QN-I-470 Firmware Quantum NetworksのQN-I-470 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-41037 2026-05-8 12:11 2026-04-21 Show GitHub Exploit DB Packet Storm
3328 8.8 重要
Adjacent
Quantum Networks QN-I-470 Firmware Quantum NetworksのQN-I-470 Firmwareにおける脆弱なパスワードの要求に関する脆弱性 CWE-521
脆弱なパスワードポリシー
CVE-2026-41038 2026-05-8 12:11 2026-04-21 Show GitHub Exploit DB Packet Storm
3329 7.5 重要
Network
Quantum Networks QN-I-470 Firmware Quantum NetworksのQN-I-470 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-41039 2026-05-8 12:11 2026-04-21 Show GitHub Exploit DB Packet Storm
3330 8.8 重要
Adjacent
D-Link Systems, Inc. DIR-605L ファームウェア D-Link CorporationのDIR-605L ファームウェアにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2026-42372 2026-05-8 12:11 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312931 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154_scan_worker In the `mac802154_scan_worker` function, the `scan_req->t… CWE-416
 Use After Free
CVE-2024-50005 2024-11-8 04:27 2024-10-22 Show GitHub Exploit DB Packet Storm
312932 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: i2c: ar0521: Use cansleep version of gpiod_set_value() If we use GPIO reset from I2C port expander, we must use *_cansleep… NVD-CWE-noinfo
CVE-2024-49961 2024-11-8 04:22 2024-10-22 Show GitHub Exploit DB Packet Storm
312933 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix memfd_pin_folios free_huge_pages leak memfd_pin_folios followed by unpin_folios fails to restore free_huge_pages … NVD-CWE-Other
CVE-2024-49964 2024-11-8 04:20 2024-10-22 Show GitHub Exploit DB Packet Storm
312934 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: static_call: Replace pointless WARN_ON() in static_call_module_notify() static_call_module_notify() triggers a WARN_ON(), when me… NVD-CWE-noinfo
CVE-2024-49954 2024-11-8 04:16 2024-10-22 Show GitHub Exploit DB Packet Storm
312935 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice The km.state is not checked in driver's delayed work. When xfr… CWE-672
 Operation on a Resource after Expiration or Release
CVE-2024-49953 2024-11-8 02:44 2024-10-22 Show GitHub Exploit DB Packet Storm
312936 - - - An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 05.37.42, 5.4 before 05.45.39, 5.5 before 05.53.39, and 5.6 before 05.60.39 that … - CVE-2023-28149 2024-11-8 02:35 2024-08-1 Show GitHub Exploit DB Packet Storm
312937 4.8 MEDIUM
Network
agendaless waitress Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recv_bytes (defaults to 8192) long, followed by a secondary request using HTTP… CWE-444
CWE-367
HTTP Request Smuggling
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-49768 2024-11-8 02:28 2024-10-30 Show GitHub Exploit DB Packet Storm
312938 2.7 LOW
Network
nirmata kyverno Kyverno is a policy engine designed for Kubernetes. A kyverno ClusterPolicy, ie. "disallow-privileged-containers," can be overridden by the creation of a PolicyException in a random namespace. By des… CWE-863
 Incorrect Authorization
CVE-2024-48921 2024-11-8 02:20 2024-10-30 Show GitHub Exploit DB Packet Storm
312939 9.8 CRITICAL
Network
servicenow servicenow ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context… CWE-94
Code Injection
CVE-2024-8923 2024-11-8 02:18 2024-10-30 Show GitHub Exploit DB Packet Storm
312940 7.5 HIGH
Network
servicenow servicenow ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. Serv… CWE-89
SQL Injection
CVE-2024-8924 2024-11-8 02:16 2024-10-30 Show GitHub Exploit DB Packet Storm