Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4021 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5992 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4022 8.1 重要
Network
OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-6011 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4023 8.8 重要
Network
D-Link Systems, Inc. DIR-513 ファームウェア D-Link CorporationのDIR-513 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6012 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4024 8.8 重要
Network
D-Link Systems, Inc. DIR-513 ファームウェア D-Link CorporationのDIR-513 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6013 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4025 8.8 重要
Network
D-Link Systems, Inc. DIR-513 ファームウェア D-Link CorporationのDIR-513 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6014 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4026 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. AC9 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC9 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6015 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4027 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. AC9 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC9 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6016 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4028 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. i6 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のi6 ファームウェアにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-6024 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
4029 8.8 重要
Network
MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-352
CWE-862
CVE-2026-6109 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4030 9.8 緊急
Network
MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-74
CWE-94
CVE-2026-6110 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315261 9.8 CRITICAL
Network
gradio_project gradio Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-47167 2024-10-18 01:53 2024-10-11 Show GitHub Exploit DB Packet Storm
315262 5.3 MEDIUM
Network
gradio_project gradio Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in the `/custom_component` endpoint. Attackers can exploit this… CWE-22
Path Traversal
CVE-2024-47166 2024-10-18 01:48 2024-10-11 Show GitHub Exploit DB Packet Storm
315263 9.8 CRITICAL
Network
hdfgroup hdf5 HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service or potential code execution. CWE-787
 Out-of-bounds Write
CVE-2024-32608 2024-10-18 01:47 2024-10-9 Show GitHub Exploit DB Packet Storm
315264 5.4 MEDIUM
Network
gradio_project gradio Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a null origin**. When a Gradio server is deployed locally, the… NVD-CWE-noinfo
CVE-2024-47165 2024-10-18 01:46 2024-10-11 Show GitHub Exploit DB Packet Storm
315265 6.5 MEDIUM
Network
gradio_project gradio Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal checks** within the `is_in_or_equal` function. This function,… CWE-22
Path Traversal
CVE-2024-47164 2024-10-18 01:40 2024-10-11 Show GitHub Exploit DB Packet Storm
315266 8.3 HIGH
Network
gradio_project gradio Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to **CORS origin validation**, where the Gradio server fails to validate the request origin when … NVD-CWE-Other
CVE-2024-47084 2024-10-18 01:30 2024-10-11 Show GitHub Exploit DB Packet Storm
315267 8.8 HIGH
Network
microchip timeprovider_4100_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Co… CWE-78
OS Command 
CVE-2024-9054 2024-10-18 00:19 2024-10-5 Show GitHub Exploit DB Packet Storm
315268 6.5 MEDIUM
Adjacent
microchip timeprovider_4100_firmware Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvi… CWE-89
SQL Injection
CVE-2024-7801 2024-10-18 00:19 2024-10-5 Show GitHub Exploit DB Packet Storm
315269 9.8 CRITICAL
Network
microchip timeprovider_4100_firmware Improper Authentication vulnerability in Microchip TimeProvider 4100 (login modules) allows Session Hijacking.This issue affects TimeProvider 4100: from 1.0 before 2.4.7. CWE-287
Improper Authentication
CVE-2024-43685 2024-10-18 00:17 2024-10-5 Show GitHub Exploit DB Packet Storm
315270 8.8 HIGH
Local
cisco nx-os A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underly… NVD-CWE-Other
CVE-2024-20284 2024-10-18 00:03 2024-08-29 Show GitHub Exploit DB Packet Storm