Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3321 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装
CVE-2026-35343 2026-05-7 11:27 2026-04-22 Show GitHub Exploit DB Packet Storm
3322 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける未チェックの戻り値に関する脆弱性 CWE-252
未チェックの戻り値
CVE-2026-35344 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3323 5.3 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける複数の脆弱性 CWE-367
CWE-59
CVE-2026-35345 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3324 5.5 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける誤って解決された名前や参照の使用に関する脆弱性 CWE-706
誤って解決された名前や参照の使用
CVE-2026-35358 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3325 6.6 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-35365 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3326 4.4 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2026-35366 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3327 5.5 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-35369 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3328 4.4 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-35370 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3329 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示
CVE-2026-35371 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
3330 5 警告
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー
CVE-2026-35372 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317551 8.8 HIGH
Network
easytest easytest_online_test_platform SQL Injection in download personal learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the uid param… CWE-89
SQL Injection
CVE-2024-43774 2024-09-4 21:26 2024-09-2 Show GitHub Exploit DB Packet Storm
317552 9.8 CRITICAL
Network
easytest easytest_online_test_platform SQL Injection in download class learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the cstr parameter. CWE-89
SQL Injection
CVE-2024-43773 2024-09-4 21:26 2024-09-2 Show GitHub Exploit DB Packet Storm
317553 8.1 HIGH
Network
symphonyfintech xts_mobile_trader
xts_web_trader
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attack… CWE-863
 Incorrect Authorization
CVE-2024-45588 2024-09-4 21:15 2024-09-3 Show GitHub Exploit DB Packet Storm
317554 8.8 HIGH
Network
symphonyfintech xts_mobile_trader
xts_web_trader
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remot… NVD-CWE-Other
CVE-2024-45587 2024-09-4 21:15 2024-09-3 Show GitHub Exploit DB Packet Storm
317555 8.8 HIGH
Network
symphonyfintech xts_mobile_trader
xts_web_trader
This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote… NVD-CWE-Other
CVE-2024-45586 2024-09-4 21:15 2024-09-3 Show GitHub Exploit DB Packet Storm
317556 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A bu… CWE-416
 Use After Free
CVE-2024-44946 2024-09-4 21:15 2024-08-31 Show GitHub Exploit DB Packet Storm
317557 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Add error handling to pair_device() hci_conn_params_add() never checks for a NULL value and could lead to a NULL… CWE-476
 NULL Pointer Dereference
CVE-2024-43884 2024-09-4 21:15 2024-08-26 Show GitHub Exploit DB Packet Storm
317558 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in proc_cpuset_show() An UAF can happen when /proc/cpuset is read as reported in [1]. This can be rep… CWE-416
 Use After Free
CVE-2024-43853 2024-09-4 21:15 2024-08-17 Show GitHub Exploit DB Packet Storm
317559 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when adding pages to compressed bio At add_ra_bio_pages() we are accessing the extent map to… CWE-416
 Use After Free
CVE-2024-42314 2024-09-4 21:15 2024-08-17 Show GitHub Exploit DB Packet Storm
317560 9.8 CRITICAL
Network
easytest easytest_online_test_platform SQL Injection in download student learning course function of Easytest Online Test Platform ver.24E01 and earlier allow remote attackers to execute arbitrary SQL commands via the uid parameter. CWE-89
SQL Injection
CVE-2024-43772 2024-09-4 21:11 2024-09-2 Show GitHub Exploit DB Packet Storm