Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
511 7 重要
Local 		- アップルのmacOSにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2025-46284 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
512 5.5 警告
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-46307 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
513 7.5 重要
Network 		WSO2 WSO2 Universal Gateway
WSO2 API Control Plane
WSO2 API Manager
WSO2 Traffic Manager 		WSO2のWSO2 API Control Plane等の複数製品におけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2025-8154 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
514 8.8 重要
Network 		WSO2 WSO2 Universal Gateway
WSO2 API Control Plane
WSO2 API Manager
WSO2 Traffic Manager 		WSO2のWSO2 API Control Plane等の複数製品におけるパーミッションの不適切な保持に関する脆弱性 CWE-281
パーミッションの不適切な保持 		CVE-2025-8325 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
515 7.2 重要
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおける複数の脆弱性 CWE-284
CWE-863
CVE-2025-9973 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
516 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-1402 2026-05-29 11:18 2026-05-27 Show GitHub Exploit DB Packet Storm
517 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-23292 2026-05-29 11:18 2026-03-25 Show GitHub Exploit DB Packet Storm
518 9.8 緊急
Network 		マイクロソフト Microsoft Power Pages Microsoft Power Pages Remote Code Execution Vulnerability CWE-77
コマンドインジェクション 		CVE-2026-23652 2026-05-29 11:18 2026-05-22 Show GitHub Exploit DB Packet Storm
519 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-2393 2026-05-29 11:18 2026-05-11 Show GitHub Exploit DB Packet Storm
520 4.7 警告
Local 		NVIDIA gpu display driver NVIDIAのgpu display driverにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-24199 2026-05-29 11:18 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319311 4.3 MEDIUM
Network 		cyberark identity CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-200
Information Exposure 		CVE-2024-42338 2024-08-31 04:47 2024-08-25 Show GitHub Exploit DB Packet Storm
319312 6.5 MEDIUM
Network 		cyberark identity CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-200
Information Exposure 		CVE-2024-42337 2024-08-31 04:47 2024-08-25 Show GitHub Exploit DB Packet Storm
319313 4.8 MEDIUM
Network 		concretecms concrete_cms Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in Board instances. A rogue administrator could inject malicious code. The Concrete CMS security team gave this vu… CWE-79
Cross-site Scripting 		CVE-2024-7512 2024-08-31 03:19 2024-08-12 Show GitHub Exploit DB Packet Storm
319314 4.8 MEDIUM
Network 		concretecms concrete_cms Concrete CMS versions 9.0.0 to 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer when user input is stored and later embedded into responses. A rogue administrator could inject mal… CWE-79
Cross-site Scripting 		CVE-2024-4350 2024-08-31 03:18 2024-08-12 Show GitHub Exploit DB Packet Storm
319315 5.4 MEDIUM
Network 		zohocorp manageengine_servicedesk_plus_msp
manageengine_servicedesk_plus
manageengine_supportcenter_plus 		Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.… CWE-79
Cross-site Scripting 		CVE-2024-38869 2024-08-31 03:15 2024-08-24 Show GitHub Exploit DB Packet Storm
319316 9.8 CRITICAL
Network 		pimax play
pitool 		Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker. NVD-CWE-Other
CVE-2024-41889 2024-08-31 02:53 2024-08-5 Show GitHub Exploit DB Packet Storm
319317 8.0 HIGH
Adjacent 		zexelon zwx-2000csw2-hn_firmware Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the con… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2024-41720 2024-08-31 02:49 2024-08-5 Show GitHub Exploit DB Packet Storm
319318 8.8 HIGH
Adjacent 		zexelon zwx-2000csw2-hn_firmware ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the devic… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-39838 2024-08-31 02:49 2024-08-5 Show GitHub Exploit DB Packet Storm
319319 9.1 CRITICAL
Network 		hamastar meetinghub_paperless_meetings A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to … CWE-522
 Insufficiently Protected Credentials 		CVE-2024-6118 2024-08-31 02:44 2024-08-5 Show GitHub Exploit DB Packet Storm
319320 8.8 HIGH
Network 		hamastar meetinghub_paperless_meetings A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary sy… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-6117 2024-08-31 02:41 2024-08-5 Show GitHub Exploit DB Packet Storm