Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3671 5.1 警告
Local 		Mozilla Foundation thin-vec Mozilla Foundationのthin-vecにおける複数の脆弱性 CWE-415
CWE-416
CVE-2026-6654 2026-05-14 10:23 2026-04-20 Show GitHub Exploit DB Packet Storm
3672 7.2 重要
Network 		SUN NET TECHNOLOGIES CO., LTD. eHRD CPAS
eHRD CTMS 		SUN NET TECHNOLOGIES CO., LTD.のeHRD CPAS等の複数製品における危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-7490 2026-05-14 10:23 2026-05-2 Show GitHub Exploit DB Packet Storm
3673 6.3 警告
Network 		Router-For.ME CLI Proxy API Router-For.MEのCLI Proxy APIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-8081 2026-05-14 10:23 2026-05-7 Show GitHub Exploit DB Packet Storm
3674 9.1 緊急
Network 		LibreNMS LibreNMS LibreNMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-51092 2026-05-14 10:23 2026-05-8 Show GitHub Exploit DB Packet Storm
3675 9.8 緊急
Network 		The PHP Group PHP The PHP GroupのPHPにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2025-14179 2026-05-14 10:23 2026-05-10 Show GitHub Exploit DB Packet Storm
3676 7.5 重要
Network 		IBM watsonx.data IBMのwatsonx.dataにおける意図するエンドポイントとの通信チャネルの制限に関する脆弱性 CWE-923
意図するエンドポイントとの通信チャネルの不適切な制限 		CVE-2025-36180 2026-05-14 10:23 2026-04-30 Show GitHub Exploit DB Packet Storm
3677 5.5 警告
Local 		IBM watsonx.data IBMのwatsonx.dataにおける認証情報の平文保存に関する脆弱性 CWE-256
平文でパスワードを保存 		CVE-2025-36335 2026-05-14 10:23 2026-04-30 Show GitHub Exploit DB Packet Storm
3678 7.5 重要
Network 		アップル iOS
iPadOS 		アップルのiPadOS等の複数製品におけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2025-46311 2026-05-14 10:23 2026-05-12 Show GitHub Exploit DB Packet Storm
3679 4.7 警告
Network 		ISPConfig ISPConfig ISPConfigにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-52206 2026-05-14 10:23 2026-05-5 Show GitHub Exploit DB Packet Storm
3680 7.3 重要
Network 		AstrBot AstrBot AstrBotにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2025-55449 2026-05-14 10:23 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312681 - - - A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected i… - CVE-2024-52762 2024-11-21 05:35 2024-11-20 Show GitHub Exploit DB Packet Storm
312682 - - - In HWCSession::SetColorModeById of hwc_session.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional executio… - CVE-2018-9409 2024-11-21 05:35 2024-11-20 Show GitHub Exploit DB Packet Storm
312683 9.8 CRITICAL
Network 		tenda ac6_firmware Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime. CWE-120
Classic Buffer Overflow 		CVE-2024-52714 2024-11-21 05:35 2024-11-20 Show GitHub Exploit DB Packet Storm
312684 7.5 HIGH
Network 		qualcomm 315_5g_iot_modem_firmware
apq8064au_firmware
aqt1000_firmware
ar8031_firmware
ar8035_firmware
ar9380_firmware
csr8811_firmware
csra6620_firmware
csra6640_firmware
csrb31024… 		Transient DOS while parsing ESP IE from beacon/probe response frame. CWE-125
Out-of-bounds Read 		CVE-2024-33014 2024-11-21 05:35 2024-08-6 Show GitHub Exploit DB Packet Storm
312685 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: io_uring: check if we need to reschedule during overflow flush In terms of normal application usage, this list will always be emp… NVD-CWE-noinfo
CVE-2024-50060 2024-11-21 05:25 2024-10-22 Show GitHub Exploit DB Packet Storm
312686 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c Fix potential dereferencing of ERR_PTR() in find_format_by_pix() and uvc_… CWE-476
 NULL Pointer Dereference 		CVE-2024-50056 2024-11-21 05:18 2024-10-22 Show GitHub Exploit DB Packet Storm
312687 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ntfs3: Change to non-blocking allocation in ntfs_d_hash d_hash is done while under "rcu-walk" and should not sleep. __get_name() … NVD-CWE-noinfo
CVE-2024-50065 2024-11-21 05:07 2024-10-22 Show GitHub Exploit DB Packet Storm
312688 7.5 HIGH
Network 		qualcomm ar8035_firmware
csr8811_firmware
fastconnect_6200_firmware
fastconnect_6700_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_platform_firmware
immersive… 		Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. CWE-125
Out-of-bounds Read 		CVE-2024-33015 2024-11-21 04:57 2024-08-6 Show GitHub Exploit DB Packet Storm
312689 7.5 HIGH
Network 		qualcomm csr8811_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_platform_firmware
immersive_home_214_platform_firmware
immersive_home_21… 		Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. CWE-125
Out-of-bounds Read 		CVE-2024-33025 2024-11-21 04:53 2024-08-6 Show GitHub Exploit DB Packet Storm
312690 7.5 HIGH
Network 		qualcomm ar8035_firmware
csr8811_firmware
fastconnect_6700_firmware
fastconnect_6800_firmware
fastconnect_6900_firmware
fastconnect_7800_firmware
flight_rb5_5g_platform_firmware
immersive… 		Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. CWE-190
 Integer Overflow or Wraparound 		CVE-2024-33024 2024-11-21 04:42 2024-08-6 Show GitHub Exploit DB Packet Storm