Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 4:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
381 7.5 重要
Network
Netty Netty Nettyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-46340 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
382 5.3 警告
Network
Netty Netty Nettyにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇
CVE-2026-47244 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
383 10 緊急
Network
Netty Netty Nettyにおけるデータの信頼性についての不十分な検証に関する脆弱性 New CWE-345
データの信頼性についての不十分な検証
CVE-2026-47691 2026-06-15 18:37 2026-06-12 Show GitHub Exploit DB Packet Storm
384 7.5 重要
Network
Netty Netty Nettyにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-48006 2026-06-15 18:36 2026-06-12 Show GitHub Exploit DB Packet Storm
385 7.5 重要
Network
Netty Netty Nettyにおける複数の脆弱性 New CWE-400
CWE-401
CVE-2026-48043 2026-06-15 18:36 2026-06-12 Show GitHub Exploit DB Packet Storm
386 7.5 重要
Network
Netty Netty Nettyにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-48059 2026-06-15 18:36 2026-06-12 Show GitHub Exploit DB Packet Storm
387 7.5 重要
Network
Netty Netty Nettyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-48748 2026-06-15 18:36 2026-06-12 Show GitHub Exploit DB Packet Storm
388 4.8 警告
Network
Netty Netty Nettyにおける複数の脆弱性 New CWE-200
CWE-330
CVE-2026-50009 2026-06-15 18:36 2026-06-12 Show GitHub Exploit DB Packet Storm
389 7.5 重要
Network
Netty Netty Nettyにおけるデジタル署名の検証に関する脆弱性 New CWE-347
デジタル署名の不適切な検証
CVE-2026-50010 2026-06-15 18:36 2026-06-12 Show GitHub Exploit DB Packet Storm
390 7.5 重要
Network
Netty Netty Nettyにおける複数の脆弱性 New CWE-400
CWE-770
CVE-2026-50011 2026-06-15 18:36 2026-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319921 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could acc… NVD-CWE-noinfo
CVE-2024-46675 2024-09-21 02:18 2024-09-13 Show GitHub Exploit DB Packet Storm
319922 9.8 CRITICAL
Network
sfs winsure Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection.This issue affects ww.Winsure: before 4.6.2. CWE-611
XXE
CVE-2024-7098 2024-09-21 02:14 2024-09-17 Show GitHub Exploit DB Packet Storm
319923 9.8 CRITICAL
Network
sfs insuree_gl Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection.This issue affects InsureE GL: before 4.6.2. CWE-89
SQL Injection
CVE-2024-6401 2024-09-21 02:07 2024-09-17 Show GitHub Exploit DB Packet Storm
319924 7.8 HIGH
Local
refuel autolabel An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its multilabel classification tasks handle provided CSV files. If a use… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2024-27321 2024-09-21 02:06 2024-09-12 Show GitHub Exploit DB Packet Storm
319925 8.8 HIGH
Network
oretnom23 simple_forum\/discussion_system A vulnerability, which was classified as critical, was found in SourceCodester Simple Forum-Discussion System 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argu… CWE-22
Path Traversal
CVE-2024-9032 2024-09-21 02:04 2024-09-20 Show GitHub Exploit DB Packet Storm
319926 8.1 HIGH
Network
totolink a720r_firmware A vulnerability classified as critical has been found in TOTOLINK A720R 4.1.5. Affected is the function exportOvpn. The manipulation leads to os command injection. It is possible to launch the attack… CWE-78
OS Command 
CVE-2024-8869 2024-09-21 01:59 2024-09-15 Show GitHub Exploit DB Packet Storm
319927 7.5 HIGH
Network
xiaohe4966 tpmecms A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipu… CWE-22
Path Traversal
CVE-2024-8876 2024-09-21 01:58 2024-09-16 Show GitHub Exploit DB Packet Storm
319928 6.7 MEDIUM
Local
cisco identity_services_engine A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system a… CWE-78
OS Command 
CVE-2024-20469 2024-09-21 01:58 2024-09-5 Show GitHub Exploit DB Packet Storm
319929 4.7 MEDIUM
Network
send_project send Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0… CWE-79
Cross-site Scripting
CVE-2024-43799 2024-09-21 01:57 2024-09-11 Show GitHub Exploit DB Packet Storm
319930 8.8 HIGH
Network
qnap qts
quts_hero
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execu… CWE-120
CWE-122
Classic Buffer Overflow
Heap-based Buffer Overflow
CVE-2024-32763 2024-09-21 01:49 2024-09-7 Show GitHub Exploit DB Packet Storm