Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3751 8.1 重要
Network 		VMware Spring Cloud Config VMwareのSpring Cloud ConfigにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-41002 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
3752 4.4 警告
Local 		VMware Spring Cloud Config VMwareのSpring Cloud Configにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-41004 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
3753 5.3 警告
Network 		Sync-in Sync-in Server Sync-inのSync-in Serverにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-41161 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3754 5.3 警告
Network 		angular angular angularにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41423 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3755 8.1 重要
Network 		Linux Foundation dapr Linux Foundationのdaprにおける複数の脆弱性 CWE-22
CWE-284
CWE-noinfo
CVE-2026-41491 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3756 7.5 重要
Network 		Loren Segal YARD Loren SegalのYARDにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41493 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3757 3.3 低
Network 		Kimai project kimai Kimai projectのKimaiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-41498 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3758 7.4 重要
Network 		go-git project go-git go-git projectのgo-gitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-41506 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3759 8.1 重要
Network 		Andreas Kloeckner RELATE Andreas KloecknerのRELATEにおける複数の脆弱性 CWE-203
CWE-208
CVE-2026-41588 2026-05-14 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3760 8.8 重要
Network 		NocoBase NocoBase NocoBaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-41640 2026-05-14 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315621 6.8 MEDIUM
Physics 		gncchome gncc_c2_firmware Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port. CWE-287
Improper Authentication 		CVE-2024-31800 2024-10-31 05:35 2024-08-16 Show GitHub Exploit DB Packet Storm
315622 4.3 MEDIUM
Network 		google chrome Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTM… NVD-CWE-noinfo
CVE-2024-6999 2024-10-31 05:35 2024-08-7 Show GitHub Exploit DB Packet Storm
315623 8.1 HIGH
Network 		mozilla firefox A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. *This issue only affects Android versions of Firefox.* Thi… NVD-CWE-Other
CVE-2024-7523 2024-10-31 05:35 2024-08-6 Show GitHub Exploit DB Packet Storm
315624 4.1 MEDIUM
Network 		solarwinds serv-u Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permissions can modify a variable with a payload. CWE-79
Cross-site Scripting 		CVE-2024-45714 2024-10-31 05:33 2024-10-16 Show GitHub Exploit DB Packet Storm
315625 4.9 MEDIUM
Network 		topdata inner_rep_plus A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been rated as problematic. Affected by this issue is some unknown functionality of the file td.js.gz. The manipulation leads… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2024-10128 2024-10-31 05:31 2024-10-19 Show GitHub Exploit DB Packet Storm
315626 9.8 CRITICAL
Network 		riskengine radar A vulnerability has been found in wfh45678 Radar up to 1.0.8 and classified as critical. This vulnerability affects unknown code of the file /services/v1/common/upload. The manipulation of the argume… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-10120 2024-10-31 05:20 2024-10-19 Show GitHub Exploit DB Packet Storm
315627 7.8 HIGH
Local 		lakesidesoftware systrack_lsiagent Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows attackers SYSTEM level access. NVD-CWE-Other
CVE-2023-6080 2024-10-31 05:12 2024-10-19 Show GitHub Exploit DB Packet Storm
315628 - - - The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system. - CVE-2024-44301 2024-10-31 04:35 2024-10-29 Show GitHub Exploit DB Packet Storm
315629 5.5 MEDIUM
Local 		apple macos The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. A malicious application may be able to modify protected parts of the file system. NVD-CWE-noinfo
CVE-2024-44287 2024-10-31 04:35 2024-10-29 Show GitHub Exploit DB Packet Storm
315630 2.4 LOW
Physics 		apple macos The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An attacker with physical access can input Game Controller… NVD-CWE-noinfo
CVE-2024-44265 2024-10-31 04:35 2024-10-29 Show GitHub Exploit DB Packet Storm