Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3361 8.8 重要
Network
SailPoint Technologies Holdings, Inc. IdentityIQ SailPoint Technologies Holdings, Inc.のIdentityIQにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-5712 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3362 5.5 警告
Local
Canonical pdfunite Canonicalのpdfuniteにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2018-25306 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3363 9.8 緊急
Network
Kvcache-ai Ktransformers Kvcache-aiのKtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-26210 2026-05-7 10:53 2026-04-23 Show GitHub Exploit DB Packet Storm
3364 7.1 重要
Local
デル Dell/Alienware Purchased Apps デルのDell/Alienware Purchased Appsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題
CVE-2026-27105 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3365 7.8 重要
Local
entechtaiwan TViPort entechtaiwanのTViPortにおける複数の脆弱性 CWE-20
CWE-269
CVE-2026-30769 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3366 5.9 警告
Network
Elasticsearch B.V. Elastic Package Registry Elasticsearch B.V.のElastic Package Registryにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2026-33467 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
3367 4.4 警告
Local
Mercurycom MIPC252W Firmware MercurycomのMIPC252W Firmwareにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-35901 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
3368 6.2 警告
Local
Mercurycom MIPC252W Firmware MercurycomのMIPC252W Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-35902 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
3369 9.8 緊急
Network
Mercurycom MIPC252W Firmware MercurycomのMIPC252W Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-35903 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
3370 4.8 警告
Network
Apache Software Foundation Apache Storm Prometheus Reporter Apache Software FoundationのApache Storm Prometheus Reporterにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-40557 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316591 7.1 HIGH
Local
microsoft azure_network_watcher_agent Azure Network Watcher VM Agent Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38188 2024-09-18 02:49 2024-09-11 Show GitHub Exploit DB Packet Storm
316592 7.3 HIGH
Local
microsoft azure_network_watcher_agent Azure Network Watcher VM Agent Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-43470 2024-09-18 02:35 2024-09-11 Show GitHub Exploit DB Packet Storm
316593 3.1 LOW
Adjacent
rapid7 insight_platform Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of… CWE-862
 Missing Authorization
CVE-2024-8042 2024-09-18 02:25 2024-09-10 Show GitHub Exploit DB Packet Storm
316594 7.5 HIGH
Adjacent
microsoft windows_10_1507
windows_server_2019
windows_server_2022
windows_server_2022_23h2
windows_11_24h2
windows_10_1607
windows_server_2016
windows_10_22h2
windows_11_23h2
windows…
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-38119 2024-09-18 02:23 2024-09-11 Show GitHub Exploit DB Packet Storm
316595 9.9 CRITICAL
Network
microsoft azure_web_apps An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network. NVD-CWE-noinfo
CVE-2024-38194 2024-09-18 02:02 2024-09-11 Show GitHub Exploit DB Packet Storm
316596 9.0 CRITICAL
Network
microsoft azure_stack_hub Azure Stack Hub Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38216 2024-09-18 02:00 2024-09-11 Show GitHub Exploit DB Packet Storm
316597 7.5 HIGH
Network
dlink di-8100_firmware D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrv_asp function. CWE-787
 Out-of-bounds Write
CVE-2024-44375 2024-09-18 02:00 2024-09-9 Show GitHub Exploit DB Packet Storm
316598 9.0 CRITICAL
Network
microsoft azure_stack_hub Azure Stack Hub Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38220 2024-09-18 01:59 2024-09-11 Show GitHub Exploit DB Packet Storm
316599 9.8 CRITICAL
Network
microsoft dynamics_365_business_central Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-38225 2024-09-18 01:58 2024-09-11 Show GitHub Exploit DB Packet Storm
316600 7.2 HIGH
Network
microsoft sharepoint_server Microsoft SharePoint Server Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-38228 2024-09-18 01:57 2024-09-11 Show GitHub Exploit DB Packet Storm