Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3391 6.5 警告
Network 		フォーティネット FortiSOAR フォーティネットのFortiSOARにおける複数の脆弱性 CWE-257
CWE-522
CVE-2026-22576 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
3392 8.8 重要
Network 		redis Redis Redis Ltd.のRedisにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-23479 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
3393 8.1 重要
Network 		redis Redis Redis Ltd.のRedisにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-23631 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
3394 6.5 警告
Network 		マイクロソフト Microsoft Visual Studio Code CoPilot Chat Extension GitHub Copilot と Visual Studio Code の情報漏えいの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-23653 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
3395 8.1 重要
Network 		フォーティネット FortiSOAR フォーティネットのFortiSOARにおける複数の脆弱性 CWE-287
CWE-862
CVE-2026-23708 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
3396 8.8 重要
Network 		redis Redis Redis Ltd.のRedisにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-25243 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
3397 7.8 重要
Local 		クアルコム X2000094 ファームウェア
XG101002 ファームウェア
Snapdragon AR1 Gen 1 ファームウェア
WSA8835 ファームウェア
XG101032 ファームウェア
WSA8830 ファームウェア
fastconnect 7800&nb… 		クアルコムのCologne ファームウェア等の複数製品における複数の脆弱性 CWE-749
CWE-787
CVE-2026-25266 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
3398 9.8 緊急
Network 		クアルコム QCA7005 ファームウェア クアルコムのQCA7005 ファームウェアにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-25293 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
3399 10 緊急
Network 		vm2 project vm2 vm2 projectのvm2における複数の脆弱性 CWE-693
CWE-94
CVE-2026-26332 2026-05-8 12:08 2026-05-4 Show GitHub Exploit DB Packet Storm
3400 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-28474 2026-05-8 12:08 2026-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313051 - - - OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain a vulnerability that allows an attacker that has gained temporary con… CWE-620
 Unverified Password Change 		CVE-2024-51493 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313052 - - - Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password. This critical security flaw can result in unauthorized access to the platform… - CVE-2024-51382 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313053 - - - Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, including creating admin accounts. This critical flaw can lead to… - CVE-2024-51381 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313054 - - - Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of JATOS v3.9.3. This flaw allows an attacker to inject malicious JavaScript into the properties section of a st… - CVE-2024-51380 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313055 - - - Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3. The vulnerability exists in the description component of the study section, where an attacker can inject JavaScript into th… - CVE-2024-51379 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313056 - - - An issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an admin account to root via the JSON-RPC-API, which is exposed by the luci-mod-rpc package - CVE-2024-51240 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313057 - - - The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring auth… - CVE-2024-51362 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313058 - - - OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain reflected XSS vulnerabilities in the login dialog and the standalone … CWE-79
CWE-80
Cross-site Scripting
Basic XSS 		CVE-2024-49377 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313059 - - - An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious X… - CVE-2024-51132 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm
313060 - - - WebLaudos v20.8 (118) was discovered to contain a cross-site scripting (XSS) vulnerability via the login page. - CVE-2024-48312 2024-11-7 03:17 2024-11-6 Show GitHub Exploit DB Packet Storm