Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4611 7.5 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-43658 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4612 6.2 警告
Local 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-43666 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4613 7.5 重要
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-43668 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4614 5.5 警告
Local 		jqlang jq jqlangのjqにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-43894 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4615 4.4 警告
Local 		jqlang jq jqlangのjqにおける複数の脆弱性 CWE-158
CWE-20
CVE-2026-43895 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4616 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-43896 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4617 8.1 重要
Network 		Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-43913 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4618 9.8 緊急
Network 		Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-43914 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
4619 8.1 重要
Network 		Pocket ID Pocket ID Pocket IDにおける複数の脆弱性 CWE-285
CWE-613
CVE-2026-43983 2026-05-15 10:58 2026-05-12 Show GitHub Exploit DB Packet Storm
4620 7.5 重要
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-44289 2026-05-15 10:58 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313511 9.8 CRITICAL
Network 		weechat weechat WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_f… CWE-190
 Integer Overflow or Wraparound 		CVE-2024-46613 2024-11-20 06:35 2024-11-11 Show GitHub Exploit DB Packet Storm
313512 - - - wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types. - CVE-2024-27532 2024-11-20 06:35 2024-11-9 Show GitHub Exploit DB Packet Storm
313513 6.1 MEDIUM
Network 		thimpress learnpress_export_import The LearnPress Export Import – WordPress extension for LearnPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'learnpress_import_form_server' parameter in all version… CWE-79
Cross-site Scripting 		CVE-2024-9609 2024-11-20 06:28 2024-11-15 Show GitHub Exploit DB Packet Storm
313514 9.8 CRITICAL
Network 		1000projects beauty_parlour_management_system A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the a… CWE-89
SQL Injection 		CVE-2024-11258 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm
313515 9.8 CRITICAL
Network 		1000projects beauty_parlour_management_system A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of t… CWE-89
SQL Injection 		CVE-2024-11257 2024-11-20 06:24 2024-11-16 Show GitHub Exploit DB Packet Storm
313516 6.1 MEDIUM
Network 		glpi-project glpi GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a … CWE-79
Cross-site Scripting 		CVE-2024-45609 2024-11-20 06:22 2024-11-16 Show GitHub Exploit DB Packet Storm
313517 5.5 MEDIUM
Local 		adobe audition Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to by… CWE-125
Out-of-bounds Read 		CVE-2024-49536 2024-11-20 06:21 2024-11-16 Show GitHub Exploit DB Packet Storm
313518 4.3 MEDIUM
Network 		smartwpress music_player_for_elementor The Music Player for Elementor – Audio Player & Podcast Player plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_mpfe_template() … CWE-862
 Missing Authorization 		CVE-2024-10582 2024-11-20 06:17 2024-11-15 Show GitHub Exploit DB Packet Storm
313519 6.1 MEDIUM
Network 		melapress wp_activity_log The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and … CWE-79
Cross-site Scripting 		CVE-2024-10793 2024-11-20 06:13 2024-11-15 Show GitHub Exploit DB Packet Storm
313520 6.1 MEDIUM
Network 		glpi-project glpi GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link… CWE-79
Cross-site Scripting 		CVE-2024-45610 2024-11-20 06:07 2024-11-16 Show GitHub Exploit DB Packet Storm