Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3771 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8290 2026-05-15 10:55 2026-05-11 Show GitHub Exploit DB Packet Storm
3772 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける複数の脆弱性 CWE-119
CWE-686
CWE-843
CVE-2026-8389 2026-05-15 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
3773 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける複数の脆弱性 CWE-119
CWE-20
CWE-79
CVE-2026-8391 2026-05-15 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
3774 8.1 重要
Network 		simple-git project simple-git simple-git projectのsimple-gitにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2022-25860
CVE-2026-28291 		2026-05-15 10:55 2026-04-13 Show GitHub Exploit DB Packet Storm
3775 8.8 重要
Network 		Genesys Latitude GenesysのLatitudeにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2025-70420 2026-05-15 10:54 2026-04-21 Show GitHub Exploit DB Packet Storm
3776 7.2 重要
Network 		Neo Technology Neo4j Neo TechnologyのNeo4jにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-1497 2026-05-15 10:54 2026-03-11 Show GitHub Exploit DB Packet Storm
3777 4.3 警告
Network 		Linux Foundation Kubewarden Linux FoundationのKubewardenにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-29773 2026-05-15 10:54 2026-03-10 Show GitHub Exploit DB Packet Storm
3778 8.8 重要
Network 		Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-31222 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3779 8.8 重要
Network 		Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-31223 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3780 8.8 重要
Network 		Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-31224 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313001 6.7 MEDIUM
Local 		intel server_board_m70klp2sb_firmware Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access. CWE-284
Improper Access Control 		CVE-2024-39609 2024-11-20 04:58 2024-11-14 Show GitHub Exploit DB Packet Storm
313002 6.7 MEDIUM
Local 		intel m10jnp2sb_firmware Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access. NVD-CWE-noinfo
CVE-2024-41167 2024-11-20 04:45 2024-11-14 Show GitHub Exploit DB Packet Storm
313003 8.1 HIGH
Network 		apereo central_authentication_service A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiratio… CWE-613
 Insufficient Session Expiration 		CVE-2024-11208 2024-11-20 04:38 2024-11-14 Show GitHub Exploit DB Packet Storm
313004 - - - PyMOL 2.5.0 contains a vulnerability in its "Run Script" function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can craft a malicious .PYM file containing… - CVE-2024-50636 2024-11-20 04:35 2024-11-12 Show GitHub Exploit DB Packet Storm
313005 - - - SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter. - CVE-2024-25254 2024-11-20 04:35 2024-11-12 Show GitHub Exploit DB Packet Storm
313006 9.8 CRITICAL
Network 		synology photos
beephotos 		Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photo… CWE-77
Command Injection 		CVE-2024-10443 2024-11-20 04:15 2024-11-15 Show GitHub Exploit DB Packet Storm
313007 9.8 CRITICAL
Network 		apereo central_authentication_service A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authe… CWE-287
Improper Authentication 		CVE-2024-11209 2024-11-20 04:14 2024-11-14 Show GitHub Exploit DB Packet Storm
313008 9.8 CRITICAL
Network 		dataprom personnel_attendance_control_systems_\/_access_control_security_systems Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems (PACS) / Access Control Security Systems (ACSS) allows Traffic Injection.This issue affects Personne… CWE-346
 Origin Validation Error 		CVE-2024-10534 2024-11-20 04:08 2024-11-15 Show GitHub Exploit DB Packet Storm
313009 8.8 HIGH
Network 		microsoft sql_server_2016
sql_server_2017
sql_server_2019 		SQL Server Native Client Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2024-48993 2024-11-20 04:06 2024-11-13 Show GitHub Exploit DB Packet Storm
313010 5.4 MEDIUM
Network 		k5n webcalendar A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name' input field while creating a new report. An attacker can … CWE-79
Cross-site Scripting 		CVE-2024-1097 2024-11-20 04:05 2024-11-15 Show GitHub Exploit DB Packet Storm