Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3631 8.5 重要
Network 		Open edX Open edx Enterprise Service Open edXのOpen edx Enterprise Serviceにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42860 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
3632 6.5 警告
Network 		Apache Software Foundation Apache-airflow-providers-opensearch Apache Software FoundationのApache-airflow-providers-opensearchにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-43826 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
3633 6.8 警告
Network 		Bpple (bx33661) Wireshark MCP Bpple (bx33661)のWireshark MCPにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-43901 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
3634 7.2 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-44872 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3635 5.5 警告
Local 		ubuntu libefiboot ubuntuのlibefibootにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-6862 2026-05-15 10:54 2026-04-22 Show GitHub Exploit DB Packet Storm
3636 9.6 緊急
Network 		Ivanti Xtraction IvantiのXtractionにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-8043 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3637 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-8159 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3638 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける複数の脆弱性 CWE-1321
CWE-248
CVE-2026-8161 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
3639 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける例外的な状態の処理に関する脆弱性 CWE-755
例外的な状態における不適切な処理 		CVE-2026-8162 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
3640 5.3 警告
Network 		Leon Timmermans Crypt::Argon2 Leon TimmermansのCrypt::Argon2における複数の脆弱性 CWE-126
CWE-191
CVE-2026-8463 2026-05-15 10:53 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312681 - - - A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected i… - CVE-2024-52762 2024-11-21 05:35 2024-11-20 Show GitHub Exploit DB Packet Storm
312682 - - - In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… - CVE-2018-9409 2024-11-21 05:35 2024-11-20 Show GitHub Exploit DB Packet Storm
312683 9.8 CRITICAL
Network 		tenda ac6_firmware Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime. CWE-120
Classic Buffer Overflow 		CVE-2024-52714 2024-11-21 05:35 2024-11-20 Show GitHub Exploit DB Packet Storm
312684 7.5 HIGH
Network 		qualcomm 315_5g_iot_modem_firmware
apq8064au_firmware
aqt1000_firmware
ar8031_firmware
ar8035_firmware
ar9380_firmware
csr8811_firmware
csra6620_firmware
csra6640_firmware
csrb31024… 		Transient DOS while parsing ESP IE from beacon/probe response frame. CWE-125
Out-of-bounds Read 		CVE-2024-33014 2024-11-21 05:35 2024-08-6 Show GitHub Exploit DB Packet Storm
312685 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring: check if we need to reschedule during overflow flush In terms of normal application usage, this list will always be emp… NVD-CWE-noinfo
CVE-2024-50060 2024-11-21 05:25 2024-10-22 Show GitHub Exploit DB Packet Storm
312686 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c Fix potential dereferencing of ERR_PTR() in find_format_by_pix() and uvc_… CWE-476
 NULL Pointer Dereference 		CVE-2024-50056 2024-11-21 05:18 2024-10-22 Show GitHub Exploit DB Packet Storm
312687 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ntfs3: Change to non-blocking allocation in ntfs_d_hash d_hash is done while under "rcu-walk" and should not sleep. __get_name() … NVD-CWE-noinfo
CVE-2024-50065 2024-11-21 05:07 2024-10-22 Show GitHub Exploit DB Packet Storm
312688 7.5 HIGH
Network 		qualcomm ar8035_firmware
csr8811_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_platform_firmware
immersive… 		Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. CWE-125
Out-of-bounds Read 		CVE-2024-33015 2024-11-21 04:57 2024-08-6 Show GitHub Exploit DB Packet Storm
312689 7.5 HIGH
Network 		qualcomm csr8811_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_platform_firmware
immersive_home_214_platform_firmware
immersive_home_21… 		Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. CWE-125
Out-of-bounds Read 		CVE-2024-33025 2024-11-21 04:53 2024-08-6 Show GitHub Exploit DB Packet Storm
312690 7.5 HIGH
Network 		qualcomm ar8035_firmware
csr8811_firmware
fastconnect_6700_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_platform_firmware
immersive… 		Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. CWE-190
 Integer Overflow or Wraparound 		CVE-2024-33024 2024-11-21 04:42 2024-08-6 Show GitHub Exploit DB Packet Storm