Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
381 7.1 重要
Network
7-Zip 7-Zip 7-Zipにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-48103 2026-06-9 14:13 2026-06-5 Show GitHub Exploit DB Packet Storm
382 4.2 警告
Network
7-Zip 7-Zip 7-Zipにおける複数の脆弱性 New CWE-125
CWE-908
CVE-2026-48104 2026-06-9 14:13 2026-06-5 Show GitHub Exploit DB Packet Storm
383 7.1 重要
Network
7-Zip 7-Zip 7-Zipにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-48111 2026-06-9 14:13 2026-06-5 Show GitHub Exploit DB Packet Storm
384 6.5 警告
Network
7-Zip 7-Zip 7-Zipにおける複数の脆弱性 New CWE-125
CWE-190
CVE-2026-48112 2026-06-9 14:13 2026-06-5 Show GitHub Exploit DB Packet Storm
385 8.8 重要
Adjacent
日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 New CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-49195 2026-06-9 14:13 2026-05-29 Show GitHub Exploit DB Packet Storm
386 7.2 重要
Network
日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおけるコマンドインジェクションの脆弱性 New CWE-77
コマンドインジェクション
CVE-2026-49196 2026-06-9 14:13 2026-05-29 Show GitHub Exploit DB Packet Storm
387 9.8 緊急
Network
日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおける認証に関する脆弱性 New CWE-287
不適切な認証
CVE-2026-49197 2026-06-9 14:13 2026-05-29 Show GitHub Exploit DB Packet Storm
388 4.9 警告
Network
日本エイサー Predator Connect W6x Firmware エイサーのPredator Connect W6x Firmwareにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御
CVE-2026-49198 2026-06-9 14:13 2026-05-29 Show GitHub Exploit DB Packet Storm
389 9.1 緊急
Network
Apache Software Foundation Apache Fory Apache Software FoundationのApache Foryにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-50076 2026-06-9 14:13 2026-06-4 Show GitHub Exploit DB Packet Storm
390 9.8 緊急
Network
日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 New CWE-345
データの信頼性についての不十分な検証
CVE-2026-50214 2026-06-9 14:13 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319511 - - - In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open Prior to commit 3f29cc82a84c ("nfsd: split sc_status out of sc_typ… - CVE-2024-46682 2024-09-13 15:15 2024-09-13 Show GitHub Exploit DB Packet Storm
319512 - - - Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain … - CVE-2024-38816 2024-09-13 15:15 2024-09-13 Show GitHub Exploit DB Packet Storm
319513 - - - In PVRSRVBridgeRGXKickTA3D2 of server_rgxta3d_bridge.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel w… - CVE-2024-31336 2024-09-13 10:15 2024-09-11 Show GitHub Exploit DB Packet Storm
319514 8.8 HIGH
Network
ivanti endpoint_manager Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality. NVD-CWE-Other
CVE-2024-8322 2024-09-13 06:56 2024-09-11 Show GitHub Exploit DB Packet Storm
319515 6.7 MEDIUM
Local
ivanti endpoint_manager An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM. CWE-427
 Uncontrolled Search Path Element
CVE-2024-8441 2024-09-13 06:53 2024-09-11 Show GitHub Exploit DB Packet Storm
319516 8.6 HIGH
Network
ivanti endpoint_manager Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network. CWE-306
Missing Authentication for Critical Function
CVE-2024-8321 2024-09-13 06:53 2024-09-11 Show GitHub Exploit DB Packet Storm
319517 5.3 MEDIUM
Network
ivanti endpoint_manager Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to spoof Network Isolation status of managed devices. CWE-306
Missing Authentication for Critical Function
CVE-2024-8320 2024-09-13 06:51 2024-09-11 Show GitHub Exploit DB Packet Storm
319518 9.8 CRITICAL
Network
ivanti endpoint_manager SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution. CWE-89
SQL Injection
CVE-2024-8191 2024-09-13 06:50 2024-09-11 Show GitHub Exploit DB Packet Storm
319519 7.5 HIGH
Network
apollographql apollo-router
apollo_helms-charts_router
apollo_router
The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Instances of the Apollo Router running versions >=… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2024-43783 2024-09-13 06:33 2024-08-28 Show GitHub Exploit DB Packet Storm
319520 7.5 HIGH
Network
apollographql apollo_router
apollo_helms-charts_router
apollo-router
apollo_query-planner
apollo_gateway
Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph independently, empowering them to deliver autonomously and incre… CWE-674
 Uncontrolled Recursion
CVE-2024-43414 2024-09-13 06:33 2024-08-28 Show GitHub Exploit DB Packet Storm