Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3701 9.3 緊急
Network 		GeoVision GV-IP Device Utility GeoVisionのGV-IP Device Utilityにおける隠蔽によるセキュリティへの依存に関する脆弱性 CWE-656
隠蔽によるセキュリティへの依存 		CVE-2026-7161 2026-05-7 11:31 2026-05-4 Show GitHub Exploit DB Packet Storm
3702 6.1 警告
Network 		GeoVision GV-LPC2211 Firmware
GV-LPC2011 Firmware 		GeoVisionのGV-LPC2011 Firmware等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7371 2026-05-7 11:31 2026-05-4 Show GitHub Exploit DB Packet Storm
3703 9 緊急
Network 		GeoVision GV-VMS Firmware GeoVisionのGV-VMS Firmwareにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-7372 2026-05-7 11:31 2026-05-4 Show GitHub Exploit DB Packet Storm
3704 7.8 重要
Local 		Zurich Instruments LabOne Q Zurich InstrumentsのLabOne Qにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-7584 2026-05-7 11:31 2026-05-1 Show GitHub Exploit DB Packet Storm
3705 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. W308R Firmware Shenzhen Tenda Technology Co.,Ltd.のW308R Firmwareにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2018-25316 2026-05-7 11:31 2026-04-29 Show GitHub Exploit DB Packet Storm
3706 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. W3002R Firmware
A302 Firmware
W309R Firmware 		Shenzhen Tenda Technology Co.,Ltd.のA302 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2018-25317 2026-05-7 11:31 2026-04-29 Show GitHub Exploit DB Packet Storm
3707 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. FH303 Firmware
A300 Firmware 		Shenzhen Tenda Technology Co.,Ltd.のA300 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2018-25318 2026-05-7 11:31 2026-04-29 Show GitHub Exploit DB Packet Storm
3708 9.8 緊急
Network 		DeanWu (pylixm) Django-mdeditor DeanWu (pylixm)のDjango-mdeditorにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-13030 2026-05-7 11:31 2026-04-30 Show GitHub Exploit DB Packet Storm
3709 7.8 重要
Local 		The Qt Company qtdeclarative The Qt Companyのqtdeclarativeにおける複数の脆弱性 CWE-20
CWE-94
CWE-94
CVE-2025-14576 2026-05-7 11:30 2026-04-30 Show GitHub Exploit DB Packet Storm
3710 6.4 警告
Local 		レッドハット OpenShift Update Service (OSUS) レッドハットのOpenShift Update Service (OSUS)における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-57854 2026-05-7 11:30 2026-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313661 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initialized when checked at HDCP capability check. Add gsc stru… CWE-908
 Use of Uninitialized Resource 		CVE-2024-49990 2024-10-29 01:42 2024-10-22 Show GitHub Exploit DB Packet Storm
313662 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbd_conn struct When sending an oplock break request, opinfo->conn is used, But freed ->conn can be used o… CWE-416
 Use After Free 		CVE-2024-49988 2024-10-29 01:38 2024-10-22 Show GitHub Exploit DB Packet Storm
313663 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) When netfilter has no entry to display, qsort is called with qsort(NULL, 0… CWE-476
 NULL Pointer Dereference 		CVE-2024-49987 2024-10-29 01:23 2024-10-22 Show GitHub Exploit DB Packet Storm
313664 8.8 HIGH
Network 		tenda ac8_firmware A vulnerability classified as critical was found in Tenda AC8 16.03.34.06. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the … CWE-121
Stack-based Buffer Overflow 		CVE-2024-10130 2024-10-29 01:08 2024-10-19 Show GitHub Exploit DB Packet Storm
313665 8.8 HIGH
Network 		tenda ac8_firmware A vulnerability was found in Tenda AC8 16.03.34.06. It has been declared as critical. Affected by this vulnerability is the function compare_parentcontrol_time of the file /goform/saveParentControlIn… CWE-121
Stack-based Buffer Overflow 		CVE-2024-10123 2024-10-29 01:06 2024-10-19 Show GitHub Exploit DB Packet Storm
313666 9.8 CRITICAL
Network 		clothes_recommendation_system_project clothes_recommendation_system A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component … CWE-89
SQL Injection 		CVE-2024-10336 2024-10-29 01:01 2024-10-25 Show GitHub Exploit DB Packet Storm
313667 9.8 CRITICAL
Network 		sadat garbage_collection_management_system A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation… CWE-89
SQL Injection 		CVE-2024-10335 2024-10-29 00:58 2024-10-25 Show GitHub Exploit DB Packet Storm
313668 6.1 MEDIUM
Network 		basercms basercms baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue. CWE-79
Cross-site Scripting 		CVE-2024-46995 2024-10-29 00:33 2024-10-25 Show GitHub Exploit DB Packet Storm
313669 5.4 MEDIUM
Network 		basercms basercms baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue. CWE-79
Cross-site Scripting 		CVE-2024-46998 2024-10-29 00:32 2024-10-25 Show GitHub Exploit DB Packet Storm
313670 5.4 MEDIUM
Network 		basercms basercms baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue. CWE-79
Cross-site Scripting 		CVE-2024-46996 2024-10-29 00:31 2024-10-25 Show GitHub Exploit DB Packet Storm