Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3701	9.3	緊急 Network	GeoVision	GV-IP Device Utility	GeoVisionのGV-IP Device Utilityにおける隠蔽によるセキュリティへの依存に関する脆弱性	CWE-656 隠蔽によるセキュリティへの依存	CVE-2026-7161	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

3702	6.1	警告 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-7371	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

3703	9	緊急 Network	GeoVision	GV-VMS Firmware	GeoVisionのGV-VMS Firmwareにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-7372	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

3704	7.8	重要 Local	Zurich Instruments	LabOne Q	Zurich InstrumentsのLabOne Qにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-7584	2026-05-7 11:31	2026-05-1	Show	GitHub Exploit DB Packet Storm

3705	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	W308R Firmware	Shenzhen Tenda Technology Co.,Ltd.のW308R Firmwareにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25316	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

3706	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	W3002R Firmware A302 Firmware W309R Firmware	Shenzhen Tenda Technology Co.,Ltd.のA302 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25317	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

3707	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	FH303 Firmware A300 Firmware	Shenzhen Tenda Technology Co.,Ltd.のA300 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25318	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

3708	9.8	緊急 Network	DeanWu (pylixm)	Django-mdeditor	DeanWu (pylixm)のDjango-mdeditorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-13030	2026-05-7 11:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

3709	7.8	重要 Local	The Qt Company	qtdeclarative	The Qt Companyのqtdeclarativeにおける複数の脆弱性	CWE-20 CWE-94 CWE-94	CVE-2025-14576	2026-05-7 11:30	2026-04-30	Show	GitHub Exploit DB Packet Storm

3710	6.4	警告 Local	レッドハット	OpenShift Update Service (OSUS)	レッドハットのOpenShift Update Service (OSUS)における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-57854	2026-05-7 11:30	2026-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313591	-	-	-	Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. IdentityServer's local API authentication handler performs insufficient validation of the cnf claim in DPoP access…	CWE-287 Improper Authentication	CVE-2024-49755	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313592	-	-	-	Tenda AC7 v.15.03.06.44 ate_iwpriv_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.	-	CVE-2024-48826	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313593	-	-	-	Tenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote attackers to execute arbitrary code.	-	CVE-2024-48825	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313594	-	-	-	The Chef Habitat builder-api on-prem-builder package with any version lower than habitat/builder-api/10315/20240913162802 is vulnerable to indirect object reference (IDOR) by un-authorized deletion …	CWE-863 Incorrect Authorization	CVE-2024-9825	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313595	-	-	-	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent. The XSS vulnerability could allow an attacker with local adm…	-	CVE-2024-5532	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313596	-	-	-	The Contact Form 7 + Telegram plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'wpcf7_Telegram::ajax' function in vers…	CWE-862 Missing Authorization	CVE-2024-9629	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313597	-	-	-	MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there i…	CWE-22 Path Traversal	CVE-2024-49771	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313598	-	-	-	A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a malicious actor with a local operational sy…	-	CVE-2024-42028	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313599	-	-	-	dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17	-	CVE-2024-48291	2024-10-29 23:34	2024-10-29	Show	GitHub Exploit DB Packet Storm

313600	-	-	-	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Post Grid Team by WPXPO PostX allows Stored XSS.This issue affects PostX: from n/a through…	CWE-79 Cross-site Scripting	CVE-2024-50443	2024-10-29 23:34	2024-10-28	Show	GitHub Exploit DB Packet Storm