Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5521 8.8 重要
Network 		Project Jupyter Jupyter Server Project JupyterのJupyter Serverにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35397 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
5522 9.6 緊急
Network 		マイクロソフト Azure Cloud Shell Azure Cloud Shell Spoofing Vulnerability CWE-77
コマンドインジェクション 		CVE-2026-35428 2026-05-11 11:10 2026-05-7 Show GitHub Exploit DB Packet Storm
5523 10 緊急
Network 		マイクロソフト Azure AI Foundry Azure AI Foundry の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35435 2026-05-11 11:10 2026-05-7 Show GitHub Exploit DB Packet Storm
5524 9.8 緊急
Network 		coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-35579 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
5525 9.8 緊急
Network 		Kestra Kestra KestraにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-38428 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
5526 7.2 重要
Network 		Gotenberg, Inc. Gotenberg TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-39383 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
5527 8.8 重要
Network 		Apache Software Foundation Apache NiFi Apache Software FoundationのApache NiFiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-39816 2026-05-11 11:10 2026-05-8 Show GitHub Exploit DB Packet Storm
5528 8.2 重要
Network 		Quarkus Quarkus Quarkusにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-39852 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
5529 4.8 警告
Network 		Linux Containers Incus Linux ContainersのIncusにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-40243 2026-05-11 11:10 2026-05-6 Show GitHub Exploit DB Packet Storm
5530 7.5 重要
Network 		Gotenberg, Inc. Gotenberg TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40280 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314911 - - - Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2024-47799 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314912 - - - Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is explo… CWE-78
OS Command  		CVE-2024-45827 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314913 - - - Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain or alt… CWE-489
Exposure of Data Element to Wrong Session  		CVE-2024-29075 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314914 5.4 MEDIUM
Network 		- - The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.5.1 due to insufficient input sani… CWE-79
Cross-site Scripting 		CVE-2024-10790 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314915 - - - Improper handling of canonical URL-encoding may lead to bypass not properly constrained by request rules. - CVE-2024-23983 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314916 - - - GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. - CVE-2024-52532 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314917 - - - GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. Input received over the network cannot trigger this. - CVE-2024-52531 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314918 - - - GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treate… - CVE-2024-52530 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314919 - - - libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with support for C++, Rust and Python3. In affected versions an unexpected `REPLY_CCRYPT… CWE-924
 Improper Enforcement of Message Integrity During Transmission in a Communication Channel 		CVE-2024-52288 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm
314920 - - - Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In affected versions the Merge functionality takes untrusted user input (file name) and us… CWE-79
CWE-20
Cross-site Scripting
 Improper Input Validation  		CVE-2024-52286 2024-11-12 22:55 2024-11-12 Show GitHub Exploit DB Packet Storm