Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
51 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-42983 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
52 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Microsoft Graphics コンポーネントの特権の昇格の脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-42986 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
53 8.1 重要
Network
マイクロソフト Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2025
Microso…
Windows 展開サービス (WDS) のリモート コード実行 New CWE-416
解放済みメモリの使用
CVE-2026-42987 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
54 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n…
Winlogon の特権の昇格の脆弱性 New CWE-59
リンク解釈の問題
CVE-2026-42989 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
55 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2019
Microsoft Windows 11 26h1
Microsoft …
Windows プッシュ通知の特権昇格の脆弱性 New CWE-362
CWE-416
CVE-2026-42991 2026-06-12 14:51 2026-06-9 Show GitHub Exploit DB Packet Storm
56 6.5 警告
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-43951 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
57 5.5 警告
Local
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理
CVE-2026-44119 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
58 7.3 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファオーバーリードの脆弱性 New CWE-126
バッファオーバーリード
CVE-2026-44185 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
59 7.3 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける無限ループに関する脆弱性 New CWE-835
無限ループ
CVE-2026-44186 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
60 9.8 緊急
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるバッファアンダーフローの脆弱性 New CWE-124
バッファアンダーフロー
CVE-2026-44631 2026-06-12 14:51 2026-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319591 8.8 HIGH
Network
thimpress learnpress Cross-Site Request Forgery (CSRF) vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.6.8.2. CWE-352
 Origin Validation Error
CVE-2024-39641 2024-09-19 01:57 2024-08-27 Show GitHub Exploit DB Packet Storm
319592 8.8 HIGH
Network
themeum tutor_lms Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.2. CWE-352
 Origin Validation Error
CVE-2024-39645 2024-09-19 01:46 2024-08-27 Show GitHub Exploit DB Packet Storm
319593 8.8 HIGH
Network
sender sender Cross-Site Request Forgery (CSRF) vulnerability in Sender Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce.This issue affects Sender – Newsletter, SMS and Email Marketing Autom… CWE-352
 Origin Validation Error
CVE-2024-39657 2024-09-19 01:25 2024-08-27 Show GitHub Exploit DB Packet Storm
319594 8.8 HIGH
Network
10up simple_local_avatars Cross-Site Request Forgery (CSRF) vulnerability in 10up Simple Local Avatars.This issue affects Simple Local Avatars: from n/a through 2.7.10. CWE-352
 Origin Validation Error
CVE-2024-43116 2024-09-19 01:22 2024-08-27 Show GitHub Exploit DB Packet Storm
319595 8.8 HIGH
Network
loftware spectrum Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks. CWE-611
XXE
CVE-2023-37233 2024-09-19 01:10 2024-09-11 Show GitHub Exploit DB Packet Storm
319596 9.8 CRITICAL
Network
loftware spectrum Loftware Spectrum through 4.6 has unprotected JMX Registry. NVD-CWE-noinfo
CVE-2023-37234 2024-09-19 01:05 2024-09-11 Show GitHub Exploit DB Packet Storm
319597 7.5 HIGH
Network
loftware spectrum Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor. NVD-CWE-noinfo
CVE-2023-37232 2024-09-19 00:55 2024-09-11 Show GitHub Exploit DB Packet Storm
319598 8.8 HIGH
Network
inspireui mstore_api The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_user_profile() function i… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8242 2024-09-19 00:47 2024-09-14 Show GitHub Exploit DB Packet Storm
319599 9.1 CRITICAL
Network
siemens simatic_rf360r_firmware
simatic_rf1170r_firmware
simatic_rf1140r_firmware
simatic_reader_rf685r_fcc_firmware
simatic_reader_rf685r_etsi_firmware
simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF… NVD-CWE-noinfo
CVE-2024-37995 2024-09-19 00:37 2024-09-10 Show GitHub Exploit DB Packet Storm
319600 7.1 HIGH
Network
siemens simatic_rf360r_firmware
simatic_rf1170r_firmware
simatic_rf1140r_firmware
simatic_reader_rf685r_fcc_firmware
simatic_reader_rf685r_etsi_firmware
simatic_reader_rf685r_cmiit_firmware
A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC Reader RF610R ETSI (6GT2811-6BC10-0AA0) (All versions < V4.2), SIMATIC Reader RF… NVD-CWE-Other
CVE-2024-37994 2024-09-19 00:35 2024-09-10 Show GitHub Exploit DB Packet Storm