Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4471 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-35371 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4472 5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-35372 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4473 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-35373 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4474 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35374 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4475 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるUnicode エンコーディングの処理に関する脆弱性 CWE-176
Unicode エンコーディングの不適切な処理 		CVE-2026-35375 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4476 5.8 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35376 2026-05-7 11:26 2026-04-22 Show GitHub Exploit DB Packet Storm
4477 8.8 重要
Network 		DBitNet N300 T1 Pro ファームウェア DBitNetのN300 T1 Pro ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-36956 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
4478 7.5 重要
Network 		DBitNet N300 T1 Pro ファームウェア DBitNetのN300 T1 Pro ファームウェアにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-36957 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
4479 4.4 警告
Local 		Absolute Software secure access Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-40949 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
4480 6.5 警告
Network 		Absolute Software secure access Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-40950 2026-05-7 11:26 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314761 5.5 MEDIUM
Local 		trendmicro antivirus_one Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detectio… NVD-CWE-noinfo
CVE-2024-45335 2024-10-25 23:37 2024-10-23 Show GitHub Exploit DB Packet Storm
314762 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be freed by error or be reallocated, so using … CWE-416
 Use After Free 		CVE-2024-49889 2024-10-25 23:37 2024-10-22 Show GitHub Exploit DB Packet Storm
314763 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominators' default to 1 [WHAT & HOW] Variables used as denominators and maybe not assigned to othe… CWE-369
 Divide By Zero 		CVE-2024-49899 2024-10-25 23:35 2024-10-22 Show GitHub Exploit DB Packet Storm
314764 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() Syzbot reported a null-ptr-deref bug: NILFS (loop0): s… CWE-476
 NULL Pointer Dereference 		CVE-2022-49007 2024-10-25 23:35 2024-10-22 Show GitHub Exploit DB Packet Storm
314765 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation This commit addresses a potential index out… CWE-129
 Improper Validation of Array Index 		CVE-2024-49895 2024-10-25 23:35 2024-10-22 Show GitHub Exploit DB Packet Storm
314766 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check stream_status before it is used [WHAT & HOW] dc_state_get_stream_status can return null, and therefore nul… CWE-476
 NULL Pointer Dereference 		CVE-2024-49893 2024-10-25 23:32 2024-10-22 Show GitHub Exploit DB Packet Storm
314767 8.7 HIGH
Network 		umbraco umbraco_cms Umbraco, a free and open source .NET content management system, has a cross-site scripting vulnerability starting in version 14.0.0 and prior to versions 14.3.1 and 15.0.0. This can be leveraged to g… CWE-79
Cross-site Scripting 		CVE-2024-47819 2024-10-25 23:24 2024-10-23 Show GitHub Exploit DB Packet Storm
314768 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() for_each_pci_dev() is implemented by pci_get_device(). The comm… NVD-CWE-Other
CVE-2022-49002 2024-10-25 23:24 2024-10-22 Show GitHub Exploit DB Packet Storm
314769 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: riscv: Sync efi page table's kernel mappings before switching The EFI page table is initially created as a copy of the kernel pag… NVD-CWE-noinfo
CVE-2022-49004 2024-10-25 23:21 2024-10-22 Show GitHub Exploit DB Packet Storm
314770 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for _sx controls For _sx controls the semantics of the max field is not the usual one, max is the num… NVD-CWE-noinfo
CVE-2022-49005 2024-10-25 23:17 2024-10-22 Show GitHub Exploit DB Packet Storm