Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4921 7.8 重要
Local 		マイクロソフト SQL Server 2019
SQL Server 2025
SQL Server 2016
SQL Server 2022
SQL Server 2017 		SQL サーバーの特権の昇格の脆弱性 CWE-89
SQLインジェクション 		CVE-2026-32176 2026-05-11 10:58 2026-04-14 Show GitHub Exploit DB Packet Storm
4922 7.5 重要
Network 		マイクロソフト .NET
visual studio 2022 		.NET のなりすましの脆弱性 CWE-138
特殊要素の不適切な無害化 		CVE-2026-32178 2026-05-11 10:58 2026-04-14 Show GitHub Exploit DB Packet Storm
4923 6.5 警告
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-32603 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
4924 9.1 緊急
Network 		X.Org Foundation
レッドハット		 X.Org X Server
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34000 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
4925 9.1 緊急
Network 		X.Org Foundation
レッドハット		 X.Org X Server
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品における不適切な長さの値によるバッファへのアクセスに関する脆弱性 CWE-805
不適切な長さの値によるバッファへのアクセス 		CVE-2026-34002 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
4926 8.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-34458 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
4927 8.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34459 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
4928 7.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34461 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
4929 7.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおける複数の脆弱性 CWE-121
CWE-170
CVE-2026-34462 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
4930 8.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおける複数の脆弱性 CWE-121
CWE-170
CVE-2026-34464 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314271 - - - Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted i… CWE-287
CWE-289
Improper Authentication
 Authentication Bypass by Alternate Name 		CVE-2024-51996 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
314272 - - - Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixe… CWE-79
Cross-site Scripting 		CVE-2024-45594 2024-11-15 23:00 2024-11-14 Show GitHub Exploit DB Packet Storm
314273 - - - A Session Fixation vulnerability exists in chatwoot/chatwoot versions prior to 2.4.0. The application does not invalidate existing sessions on other devices when a user changes their password, allowi… CWE-384
 Session Fixation 		CVE-2021-3740 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
314274 - - - The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from runn… - CVE-2024-9529 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
314275 - - - The Jobs for WordPress plugin before 2.7.8 does not sanitise and escape some of its Job settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting att… - CVE-2024-10104 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
314276 - - - A heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to cause Denial of Service (DoS) via a crafted MKV video file. - CVE-2024-41217 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
314277 - - - A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service (DoS) and Code Execution via a crafted MOV video file. - CVE-2024-41209 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
314278 - - - A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file. - CVE-2024-41206 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
314279 - - - The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration setting… - CVE-2024-48974 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm
314280 - - - The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result… - CVE-2024-48973 2024-11-15 22:58 2024-11-15 Show GitHub Exploit DB Packet Storm