Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3401 9 緊急
Network 		Jenkins プロジェクト GitHub JenkinsのGitHubにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42523 2026-05-7 10:51 2026-04-29 Show GitHub Exploit DB Packet Storm
3402 8 重要
Network 		Jenkins プロジェクト HTML Publisher Plugin JenkinsのHTML Publisher Pluginにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42524 2026-05-7 10:51 2026-04-29 Show GitHub Exploit DB Packet Storm
3403 4.3 警告
Network 		Jenkins プロジェクト Azure AD JenkinsのAzure ADにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-42525 2026-05-7 10:51 2026-04-29 Show GitHub Exploit DB Packet Storm
3404 8.8 重要
Adjacent 		TP-LINK Technologies TL-WR841N ファームウェア TP-LINK TechnologiesのTL-WR841N ファームウェアにおけるデフォルトの暗号鍵の使用に関する脆弱性 CWE-1394
デフォルトの暗号鍵の使用 		CVE-2026-5039 2026-05-7 10:51 2026-04-23 Show GitHub Exploit DB Packet Storm
3405 7.3 重要
Network 		GNU Project GNU C Library GNU ProjectのGNU C Libraryにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-5435 2026-05-7 10:51 2026-04-28 Show GitHub Exploit DB Packet Storm
3406 7.5 重要
Network 		Progress Software Corporation Telerik UI for ASP.NET AJAX Progress Software CorporationのTelerik UI for ASP.NET AJAXにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6022 2026-05-7 10:51 2026-04-22 Show GitHub Exploit DB Packet Storm
3407 9.8 緊急
Network 		Progress Software Corporation Telerik UI for ASP.NET AJAX Progress Software CorporationのTelerik UI for ASP.NET AJAXにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-6023 2026-05-7 10:51 2026-04-22 Show GitHub Exploit DB Packet Storm
3408 2.7 低
Network 		Tanium Tanium Server TaniumのTanium Serverにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-6408 2026-05-7 10:51 2026-04-22 Show GitHub Exploit DB Packet Storm
3409 5.5 警告
Local 		Wireshark Wireshark WiresharkにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-6525 2026-05-7 10:51 2026-05-2 Show GitHub Exploit DB Packet Storm
3410 7.5 重要
Network 		TYPO3 Association TYPO3 TYPO3 AssociationのTYPO3における重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存 		CVE-2026-6553 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316461 7.5 HIGH
Network 		rockwellautomation compactlogix_5380_firmware
compact_guardlogix_5380_sil_2_firmware
compact_guardlogix_5380_sil_3_firmware
compactlogix_5480_firmware
controllogix_5580_firmware
guardlogix_5580_firmware<… 		A denial-of-service vulnerability exists in the Rockwell Automation affected products when specially crafted packets are sent to the CIP Security Object. If exploited the device will become unavailab… NVD-CWE-noinfo
CVE-2024-6077 2024-09-19 23:31 2024-09-13 Show GitHub Exploit DB Packet Storm
316462 9.8 CRITICAL
Network 		soplanning soplanning A unauthenticated Remote Code Execution (RCE) vulnerability is found in the SO Planning online planning tool. If the public view setting is enabled, a attacker can upload a PHP-file that will be avai… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2024-27114 2024-09-19 23:27 2024-09-11 Show GitHub Exploit DB Packet Storm
316463 6.1 MEDIUM
Network 		microfocus edirectory Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000. CWE-79
Cross-site Scripting 		CVE-2021-22503 2024-09-19 23:25 2024-09-12 Show GitHub Exploit DB Packet Storm
316464 9.1 CRITICAL
Network 		microfocus edirectory Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2021-22533 2024-09-19 23:24 2024-09-12 Show GitHub Exploit DB Packet Storm
316465 7.5 HIGH
Network 		microfocus edirectory Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-22532 2024-09-19 23:22 2024-09-12 Show GitHub Exploit DB Packet Storm
316466 7.5 HIGH
Network 		cisco smart_license_utility A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log fi… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2024-20440 2024-09-19 22:42 2024-09-5 Show GitHub Exploit DB Packet Storm
316467 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simple_dir_operations to simple_offs… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2024-46701 2024-09-19 22:40 2024-09-13 Show GitHub Exploit DB Packet Storm
316468 5.4 MEDIUM
Network 		share_this_image_project share_this_image The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization … CWE-79
Cross-site Scripting 		CVE-2024-8108 2024-09-19 22:37 2024-08-31 Show GitHub Exploit DB Packet Storm
316469 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged when router is removed I noticed that when we do discrete host router NVM upgrade and it g… NVD-CWE-noinfo
CVE-2024-46702 2024-09-19 22:35 2024-09-13 Show GitHub Exploit DB Packet Storm
316470 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" This reverts commit 68e6939ea9ec3d6579eadeab160… NVD-CWE-noinfo
CVE-2024-46703 2024-09-19 22:33 2024-09-13 Show GitHub Exploit DB Packet Storm