Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3871 9.8 緊急
Network 		Progress Software Corporation Telerik UI for ASP.NET AJAX Progress Software CorporationのTelerik UI for ASP.NET AJAXにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-6023 2026-05-7 10:51 2026-04-22 Show GitHub Exploit DB Packet Storm
3872 2.7 低
Network 		Tanium Tanium Server TaniumのTanium Serverにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-6408 2026-05-7 10:51 2026-04-22 Show GitHub Exploit DB Packet Storm
3873 5.5 警告
Local 		Wireshark Wireshark WiresharkにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-6525 2026-05-7 10:51 2026-05-2 Show GitHub Exploit DB Packet Storm
3874 7.5 重要
Network 		TYPO3 Association TYPO3 TYPO3 AssociationのTYPO3における重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存 		CVE-2026-6553 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
3875 7.5 重要
Network 		xmlsoft.org
レッドハット		 Red Hat Hardened Images
Red Hat OpenShift Container Platform
libxml2
Red Hat Enterprise Linux
JBoss Core Services 		レッドハット等の複数ベンダの製品における型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-6732 2026-05-7 10:50 2026-04-23 Show GitHub Exploit DB Packet Storm
3876 7.5 重要
Network 		Eclipse Foundation Eclipse OpenJ9 Eclipse FoundationのEclipse OpenJ9における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-6918 2026-05-7 10:50 2026-05-5 Show GitHub Exploit DB Packet Storm
3877 - - IDrive Inc. IDrive Cloud Backup Client for Windows IDrive Cloud Backup Client for Windowsにおける権限昇格の脆弱性 - CVE-2026-1995 2026-05-1 15:13 2026-04-30 Show GitHub Exploit DB Packet Storm
3878 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月28日） - - 2026-05-1 14:31 2026-04-30 Show GitHub Exploit DB Packet Storm
3879 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7100 2026-05-1 10:49 2026-04-27 Show GitHub Exploit DB Packet Storm
3880 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F456 Firmware Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7102 2026-05-1 10:49 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314651 6.1 MEDIUM
Network 		ujangrohidin localserver Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through … CWE-79
Cross-site Scripting 		CVE-2024-10288 2024-10-24 13:07 2024-10-23 Show GitHub Exploit DB Packet Storm
314652 6.1 MEDIUM
Network 		ujangrohidin localserver Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through … CWE-79
Cross-site Scripting 		CVE-2024-10287 2024-10-24 13:07 2024-10-23 Show GitHub Exploit DB Packet Storm
314653 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NULL pointer, but that pointer is used in … CWE-476
 NULL Pointer Dereference 		CVE-2023-52918 2024-10-24 12:55 2024-10-22 Show GitHub Exploit DB Packet Storm
314654 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory allocation failure from nci_skb_alloc() (call… CWE-476
 NULL Pointer Dereference 		CVE-2023-52919 2024-10-24 12:53 2024-10-22 Show GitHub Exploit DB Packet Storm
314655 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of m_ca… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2022-49024 2024-10-24 12:50 2024-10-22 Show GitHub Exploit DB Packet Storm
314656 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix buffer overflow in elem comparison For vendor elements, the code here assumes that 5 octets are present witho… CWE-120
Classic Buffer Overflow 		CVE-2022-49023 2024-10-24 12:50 2024-10-22 Show GitHub Exploit DB Packet Storm
314657 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e… CWE-416
 Use After Free 		CVE-2022-49026 2024-10-24 12:49 2024-10-22 Show GitHub Exploit DB Packet Storm
314658 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free when reverting termination table When having multiple dests with termination tables and second one … CWE-416
 Use After Free 		CVE-2022-49025 2024-10-24 12:49 2024-10-22 Show GitHub Exploit DB Packet Storm
314659 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavf_init_module() The iavf_init_module() won't destroy workqueue when pci_register_driver() failed. … NVD-CWE-Other
CVE-2022-49027 2024-10-24 12:48 2024-10-22 Show GitHub Exploit DB Packet Storm
314660 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xa_alloc to prevent UAF Evil user can guess the next id of the vm before the ioctl completes and then call vm des… CWE-416
 Use After Free 		CVE-2024-49865 2024-10-24 12:44 2024-10-22 Show GitHub Exploit DB Packet Storm