Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4031 6.5 警告
Network 		MetaGPT MetaGPT MetaGPTにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-6111 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4032 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6120 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4033 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6121 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4034 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6122 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4035 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6123 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4036 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6124 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4037 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6133 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4038 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6134 2026-05-1 10:42 2026-04-12 Show GitHub Exploit DB Packet Storm
4039 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6135 2026-05-1 10:42 2026-04-13 Show GitHub Exploit DB Packet Storm
4040 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6136 2026-05-1 10:41 2026-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314011 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sleep in atomic at close time Matt reported a splat at msk close time: BUG: sleeping function called from invalid… CWE-667
 Improper Locking 		CVE-2022-49018 2024-10-25 03:38 2024-10-22 Show GitHub Exploit DB Packet Storm
314012 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tipc: re-fetch skb cb after tipc_msg_validate As the call trace shows, the original skb was freed in tipc_msg_validate(), and der… CWE-416
 Use After Free 		CVE-2022-49017 2024-10-25 03:36 2024-10-22 Show GitHub Exploit DB Packet Storm
314013 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: mdiobus: fix unbalanced node reference count I got the following report while doing device(mscc-miim) load test with CONFIG_… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2022-49016 2024-10-25 03:35 2024-10-22 Show GitHub Exploit DB Packet Storm
314014 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netif_rx() which may free it, after calling this, dereferencing sk… CWE-416
 Use After Free 		CVE-2022-49015 2024-10-25 03:31 2024-10-22 Show GitHub Exploit DB Packet Storm
314015 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tun_detach() syzbot reported use-after-free in tun_detach() [1]. This causes call trace like bel… CWE-416
 Use After Free 		CVE-2022-49014 2024-10-25 03:29 2024-10-22 Show GitHub Exploit DB Packet Storm
314016 - - - A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: thi… - CVE-2024-46257 2024-10-25 03:15 2024-09-28 Show GitHub Exploit DB Packet Storm
314017 7.5 HIGH
Network 		mfasoft secure_authentication_server An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows re… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-46937 2024-10-25 02:35 2024-09-16 Show GitHub Exploit DB Packet Storm
314018 7.5 HIGH
Network 		opendaylight authentication\
_authorization_and_accounting 		An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue con… NVD-CWE-noinfo
CVE-2024-46943 2024-10-25 02:35 2024-09-16 Show GitHub Exploit DB Packet Storm
314019 6.7 MEDIUM
Local 		crucial mx500_firmware Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. CWE-787
 Out-of-bounds Write 		CVE-2024-42642 2024-10-25 02:35 2024-09-5 Show GitHub Exploit DB Packet Storm
314020 - - - A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate. - CVE-2024-46256 2024-10-25 02:15 2024-09-28 Show GitHub Exploit DB Packet Storm