Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5231 8.3 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-8001 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
5232 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-8002 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
5233 5.4 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-8003 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
5234 4.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-8004 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
5235 4.3 警告
Adjacent
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-8005 2026-05-8 12:14 2026-05-6 Show GitHub Exploit DB Packet Storm
5236 9.1 緊急
Network
日立ヴァンタラ Pentaho Data Integration and Analytics 日立ヴァンタラのPentaho Data Integration and Analyticsにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-11158 2026-05-8 12:12 2026-03-10 Show GitHub Exploit DB Packet Storm
5237 7.8 重要
Local
Mobatek MobaXterm MobatekのMobaXtermにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2026-25866 2026-05-8 12:12 2026-03-9 Show GitHub Exploit DB Packet Storm
5238 8.8 重要
Network
Quantum Networks QN-I-470 Firmware Quantum NetworksのQN-I-470 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-41036 2026-05-8 12:11 2026-04-21 Show GitHub Exploit DB Packet Storm
5239 8.8 重要
Adjacent
Quantum Networks QN-I-470 Firmware Quantum NetworksのQN-I-470 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-41037 2026-05-8 12:11 2026-04-21 Show GitHub Exploit DB Packet Storm
5240 8.8 重要
Adjacent
Quantum Networks QN-I-470 Firmware Quantum NetworksのQN-I-470 Firmwareにおける脆弱なパスワードの要求に関する脆弱性 CWE-521
脆弱なパスワードポリシー
CVE-2026-41038 2026-05-8 12:11 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314771 7.5 HIGH
Network
- - A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication header containing spec… CWE-863
 Incorrect Authorization
CVE-2024-10295 2024-11-13 06:15 2024-10-25 Show GitHub Exploit DB Packet Storm
314772 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed If mgmt_index_removed is called while there are commands queued on cmd_… NVD-CWE-noinfo
CVE-2024-49951 2024-11-13 06:06 2024-10-22 Show GitHub Exploit DB Packet Storm
314773 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO After commit 7c6d2ecbda83 ("net: be more gentle about silly gso r… CWE-476
 NULL Pointer Dereference
CVE-2024-49949 2024-11-13 06:03 2024-10-22 Show GitHub Exploit DB Packet Storm
314774 9.8 CRITICAL
Network
eyecix jobsearch_wp_job_board Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a through 2.5.4. CWE-862
 Missing Authorization
CVE-2024-43929 2024-11-13 05:49 2024-11-2 Show GitHub Exploit DB Packet Storm
314775 8.8 HIGH
Network
eyecix jobsearch_wp_job_board Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: from n/a through 2.5.4. CWE-862
 Missing Authorization
CVE-2024-43928 2024-11-13 05:49 2024-11-2 Show GitHub Exploit DB Packet Storm
314776 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases mad_agent_priv lo… NVD-CWE-noinfo
CVE-2024-50095 2024-11-13 05:26 2024-11-6 Show GitHub Exploit DB Packet Storm
314777 7.5 HIGH
Network
dena h2o h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top of TCP Fast Open or QUIC 0-RTT packets is received and the IP-address-based ac… CWE-290
 Authentication Bypass by Spoofing
CVE-2024-45397 2024-11-13 05:14 2024-10-12 Show GitHub Exploit DB Packet Storm
314778 7.5 HIGH
Network
dena quicly Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure tha… CWE-617
 Reachable Assertion
CVE-2024-45396 2024-11-13 05:05 2024-10-12 Show GitHub Exploit DB Packet Storm
314779 4.3 MEDIUM
Network
dena h2o h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows users to modify the response headers being sent by h2o. The con… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2024-25622 2024-11-13 05:04 2024-10-12 Show GitHub Exploit DB Packet Storm
314780 9.8 CRITICAL
Network
dena picotls Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, picotls (specifically, bindings within pico… CWE-415
 Double Free
CVE-2024-45402 2024-11-13 05:02 2024-10-12 Show GitHub Exploit DB Packet Storm