Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
41 5.3 警告
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows Kerberos のサービス拒否の脆弱性 CWE-125
境界外読み取り
CVE-2026-42914 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
42 5.7 警告
Adjacent
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows TCP/IP のサービス拒否の脆弱性 CWE-131
正しくないバッファサイズ計算
CVE-2026-42915 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
43 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
NT OS カーネルの特権の昇格の脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-42916 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
44 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows テレフォニー サーバーの情報漏えいの脆弱性 CWE-125
境界外読み取り
CVE-2026-42968 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
45 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows プッシュ通知の情報漏えいの脆弱性 CWE-908
初期化されていないリソースの使用
CVE-2026-42969 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
46 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows プッシュ通知の情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2026-42970 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
47 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Windows プッシュ通知の情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2026-42971 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
48 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows プッシュ通知の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-42979 2026-06-12 14:52 2026-06-9 Show GitHub Exploit DB Packet Storm
49 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
NT OS カーネルの特権の昇格の脆弱性 CWE-122
CWE-191
CVE-2026-42980 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
50 8.1 重要
Network
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind…
Windows パフォーマンス モニターのリモート コード実行に対する脆弱性 CWE-191
整数アンダーフロー
CVE-2026-42981 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319701 8.8 HIGH
Network
qdocs smart_school A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the comp… CWE-89
SQL Injection
CVE-2024-8784 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
319702 5.4 MEDIUM
Network
opentibiabr myaac A vulnerability classified as problematic has been found in OpenTibiaBR MyAAC up to 0.8.16. Affected is an unknown function of the file system/pages/forum/new_post.php of the component Post Reply Han… CWE-79
Cross-site Scripting
CVE-2024-8783 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm
319703 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: Unchecked user input in bap_broadcast_assistant CWE-787
 Out-of-bounds Write
CVE-2024-5931 2024-09-19 10:35 2024-09-14 Show GitHub Exploit DB Packet Storm
319704 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT:Classic: Multiple missing buf length checks CWE-369
 Divide By Zero
CVE-2024-6135 2024-09-19 10:34 2024-09-14 Show GitHub Exploit DB Packet Storm
319705 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: HCI: adv_ext_report Improper discarding in adv_ext_report CWE-787
 Out-of-bounds Write
CVE-2024-6259 2024-09-19 10:33 2024-09-14 Show GitHub Exploit DB Packet Storm
319706 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: Classic: SDP OOB access in get_att_search_list CWE-787
 Out-of-bounds Write
CVE-2024-6137 2024-09-19 10:33 2024-09-14 Show GitHub Exploit DB Packet Storm
319707 6.5 MEDIUM
Network
microfocus edirectory Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000. CWE-521
Weak Password Requirements 
CVE-2021-38133 2024-09-19 06:05 2024-09-12 Show GitHub Exploit DB Packet Storm
319708 9.8 CRITICAL
Network
microfocus edirectory Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2021-38132 2024-09-19 06:04 2024-09-12 Show GitHub Exploit DB Packet Storm
319709 6.1 MEDIUM
Network
microfocus edirectory Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000. CWE-79
Cross-site Scripting
CVE-2021-38131 2024-09-19 06:00 2024-09-12 Show GitHub Exploit DB Packet Storm
319710 6.1 MEDIUM
Network
i-doit i-doit Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the … CWE-79
Cross-site Scripting
CVE-2024-8750 2024-09-19 05:38 2024-09-12 Show GitHub Exploit DB Packet Storm