Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3511 7.5 重要
Network 		マイクロソフト Microsoft Outlook Microsoft Outlook for iOS の改ざんの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-42893 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
3512 7.5 重要
Network 		マイクロソフト .NET ASP.NET Core のサービス拒否の脆弱性 CWE-835
無限ループ 		CVE-2026-42899 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
3513 8.6 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-43139 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3514 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-43140 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3515 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-43141 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3516 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43142 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3517 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43143 2026-05-15 11:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3518 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-43144 2026-05-15 10:59 2026-05-6 Show GitHub Exploit DB Packet Storm
3519 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43145 2026-05-15 10:59 2026-05-6 Show GitHub Exploit DB Packet Storm
3520 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43146 2026-05-15 10:59 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312551 - - - wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types. - CVE-2024-27532 2024-11-20 06:35 2024-11-9 Show GitHub Exploit DB Packet Storm
312552 6.1 MEDIUM
Network 		thimpress learnpress_export_import The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'learnpress_import_form_server' parameter in all version… CWE-79
Cross-site Scripting 		CVE-2024-9609 2024-11-20 06:28 2024-11-15 Show GitHub Exploit DB Packet Storm
312553 9.8 CRITICAL
Network 		1000projects beauty_parlour_management_system A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the a… CWE-89
SQL Injection 		CVE-2024-11258 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm
312554 9.8 CRITICAL
Network 		1000projects beauty_parlour_management_system A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of t… CWE-89
SQL Injection 		CVE-2024-11257 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm
312555 6.1 MEDIUM
Network 		glpi-project glpi GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a … CWE-79
Cross-site Scripting 		CVE-2024-45609 2024-11-20 06:22 2024-11-16 Show GitHub Exploit DB Packet Storm
312556 5.5 MEDIUM
Local 		adobe audition Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by… CWE-125
Out-of-bounds Read 		CVE-2024-49536 2024-11-20 06:21 2024-11-16 Show GitHub Exploit DB Packet Storm
312557 4.3 MEDIUM
Network 		smartwpress music_player_for_elementor The Music Player for Elementor – Audio Player & Podcast Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_mpfe_template() … CWE-862
 Missing Authorization 		CVE-2024-10582 2024-11-20 06:17 2024-11-15 Show GitHub Exploit DB Packet Storm
312558 6.1 MEDIUM
Network 		melapress wp_activity_log The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and … CWE-79
Cross-site Scripting 		CVE-2024-10793 2024-11-20 06:13 2024-11-15 Show GitHub Exploit DB Packet Storm
312559 6.1 MEDIUM
Network 		glpi-project glpi GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link… CWE-79
Cross-site Scripting 		CVE-2024-45610 2024-11-20 06:07 2024-11-16 Show GitHub Exploit DB Packet Storm
312560 5.4 MEDIUM
Network 		glpi-project glpi GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can bypass the access control … CWE-79
Cross-site Scripting 		CVE-2024-45611 2024-11-20 05:57 2024-11-16 Show GitHub Exploit DB Packet Storm