Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3651 7.3 重要
Network
Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-7324 2026-05-7 12:01 2026-04-28 Show GitHub Exploit DB Packet Storm
3652 7.5 重要
Network
Wireshark Wireshark Wiresharkにおける無限ループに関する脆弱性 CWE-835
無限ループ
CVE-2026-7375 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3653 7.5 重要
Network
Wireshark Wireshark WiresharkにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-7376 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3654 7.5 重要
Network
Wireshark Wireshark Wiresharkにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-7378 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3655 7.5 重要
Network
Wireshark Wireshark Wiresharkにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-7379 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
3656 6.1 警告
Network
dragonexpert Recent Threads on Index dragonexpertのRecent Threads on Indexにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2018-25309 2026-05-7 12:01 2026-04-29 Show GitHub Exploit DB Packet Storm
3657 6.4 警告
Local
レッドハット Web Terminal レッドハットのWeb Terminalにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2025-57853 2026-05-7 12:01 2026-04-8 Show GitHub Exploit DB Packet Storm
3658 8.5 重要
Network
オラクル Oracle Life Sciences Empirica Signal オラクルのOracle Life Sciences Empirica Signalにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-21997 2026-05-7 12:01 2026-04-21 Show GitHub Exploit DB Packet Storm
3659 9.8 緊急
Network
Arc53 DocsGPT Arc53のDocsGPTにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-26015 2026-05-7 12:01 2026-04-29 Show GitHub Exploit DB Packet Storm
3660 5.5 警告
Local
レッドハット
Sequoia PGP
rpm-sequoia
Red Hat Hardened Images
Red Hat Enterprise Linux
レッドハット等の複数ベンダの製品におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2026-2625 2026-05-7 12:01 2026-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313481 - - - An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file. - CVE-2024-48655 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
313482 - - - A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An att… - CVE-2024-48459 2024-10-30 05:35 2024-10-26 Show GitHub Exploit DB Packet Storm
313483 - - - A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inv… - CVE-2024-48426 2024-10-30 05:35 2024-10-25 Show GitHub Exploit DB Packet Storm
313484 - - - Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys - CVE-2023-32189 2024-10-30 05:35 2024-10-16 Show GitHub Exploit DB Packet Storm
313485 4.3 MEDIUM
Network
google chrome Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via… NVD-CWE-noinfo
CVE-2024-7978 2024-10-30 05:35 2024-08-22 Show GitHub Exploit DB Packet Storm
313486 4.3 MEDIUM
Network
google chrome Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discreti… NVD-CWE-noinfo
CVE-2024-7004 2024-10-30 05:35 2024-08-7 Show GitHub Exploit DB Packet Storm
313487 6.5 MEDIUM
Network
mozilla firefox
firefox_esr
thunderbird
Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, an… NVD-CWE-noinfo
CVE-2024-7518 2024-10-30 05:35 2024-08-6 Show GitHub Exploit DB Packet Storm
313488 8.8 HIGH
Network
google chrome Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security sev… CWE-125
Out-of-bounds Read
CVE-2024-7255 2024-10-30 05:35 2024-08-2 Show GitHub Exploit DB Packet Storm
313489 9.8 CRITICAL
Network
janobe online_hotel_reservation_system A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. T… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-10413 2024-10-30 05:33 2024-10-27 Show GitHub Exploit DB Packet Storm
313490 7.2 HIGH
Network
janobe online_hotel_reservation_system A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doChec… CWE-89
SQL Injection
CVE-2024-10411 2024-10-30 05:28 2024-10-27 Show GitHub Exploit DB Packet Storm