Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3811 9.8 緊急
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software CorporationのMOVEit Automation Web Adminにおける根本の脆弱性による認証回避の脆弱性 CWE-305
根本の脆弱性による認証回避 		CVE-2026-4670 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
3812 8.8 重要
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software CorporationのMOVEit Automation Web Adminにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-5174 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
3813 6.5 警告
Network 		GNU Project GNU C Library GNU ProjectのGNU C Libraryにおけるバッファオーバーリードの脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-6238 2026-05-7 11:25 2026-04-28 Show GitHub Exploit DB Packet Storm
3814 8.1 重要
Network 		langflow langflow langflowにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-6542 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
3815 6.5 警告
Network 		Devolutions Devolutions Server DevolutionsのDevolutions Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-6706 2026-05-7 11:25 2026-04-28 Show GitHub Exploit DB Packet Storm
3816 6.5 警告
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-7422 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3817 6.5 警告
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-7423 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3818 8.1 重要
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-7424 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3819 6.5 警告
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-7425 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3820 8.1 重要
Adjacent 		Amazon.com, Inc. freertos-plus-tcp Amazon.com, Inc.のfreertos-plus-tcpにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-7426 2026-05-7 11:25 2026-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313591 - - - An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the CreateModel route with a path parameter that does not exist, it reflects the "Fi… - CVE-2024-39719 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313592 - - - Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter. - CVE-2024-51065 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313593 - - - Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php. - CVE-2024-51064 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313594 - - - An issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary code via the remove function of the MobaXterm MSI is spawning one Administrative cmd (conhost.exe) - CVE-2024-48200 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313595 - - - Glossarizer through 1.5.2 improperly tries to convert text into HTML. Even though the application itself escapes special characters (e.g., <>), the underlying library converts these encoded character… - CVE-2024-42515 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313596 - - - Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server. - CVE-2024-39332 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313597 - - - Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension. - CVE-2023-52044 2024-11-2 01:35 2024-11-1 Show GitHub Exploit DB Packet Storm
313598 - - - The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges t… CWE-59
Link Following 		CVE-2024-45315 2024-11-2 01:35 2024-10-11 Show GitHub Exploit DB Packet Storm
313599 - - - Vulnerable juju hook tool abstract UNIX domain socket. When combined with an attack of JUJU_CONTEXT_ID, any user on the local system with access to the default network namespace may connect to the @/… - CVE-2024-8037 2024-11-2 01:35 2024-10-2 Show GitHub Exploit DB Packet Storm
313600 9.8 CRITICAL
Network 		tenda ac1206_firmware A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function ate_Tenda_mfg_check_usb/ate_Tenda_mfg_check_usb3 of the file /goform/ate. The m… CWE-787
 Out-of-bounds Write 		CVE-2024-10434 2024-11-2 01:32 2024-10-28 Show GitHub Exploit DB Packet Storm