Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
671 3.3
Local
Canonical Ubuntu CanonicalのUbuntuにおける初期化されていない変数の使用に関する脆弱性 CWE-457
初期化されていない変数の使用
CVE-2026-47330 2026-06-10 14:25 2026-05-28 Show GitHub Exploit DB Packet Storm
672 7.8 重要
Local
Canonical Ubuntu CanonicalのUbuntuにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-47331 2026-06-10 14:25 2026-05-28 Show GitHub Exploit DB Packet Storm
673 5.5 警告
Local
Canonical Ubuntu CanonicalのUbuntuにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-47332 2026-06-10 14:25 2026-05-28 Show GitHub Exploit DB Packet Storm
674 7.8 重要
Local
Canonical Ubuntu CanonicalのUbuntuにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-47333 2026-06-10 14:25 2026-05-28 Show GitHub Exploit DB Packet Storm
675 5.5 警告
Local
Canonical Ubuntu CanonicalのUbuntuにおけるデッドロックに関する脆弱性 CWE-833
デッドロック
CVE-2026-47334 2026-06-10 14:25 2026-05-28 Show GitHub Exploit DB Packet Storm
676 7.1 重要
Network
Grokability, Inc. Snipe-IT Grokability, Inc.のSnipe-ITにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-48507 2026-06-10 14:25 2026-06-8 Show GitHub Exploit DB Packet Storm
677 5.8 警告
Network
Arista Networks, Inc. Arista EOS Arista Networks, Inc.のArista EOSにおける要素の欠如による不完全な比較に関する脆弱性 CWE-1023
要素の欠如による不完全な比較
CVE-2026-7473 2026-06-10 14:25 2026-06-5 Show GitHub Exploit DB Packet Storm
678 5.3 警告
Network
Check MK Check MK Check MKにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-7765 2026-06-10 14:25 2026-06-8 Show GitHub Exploit DB Packet Storm
679 5.4 警告
Network
Check MK Check MK Check MKにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-8833 2026-06-10 14:24 2026-06-8 Show GitHub Exploit DB Packet Storm
680 - - 日立 Hitachi Web Server - Custom Edition
uCosminexus Developer Professional for Plug-in
Hitachi Application Server for Developers
Cosminexus HTTP ServerおよびHitachi Web Serverにおける脆弱性 - CVE-2025-65082 2026-06-10 11:05 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319691 5.3 MEDIUM
Network
secreto31126 whatsapp-api-js whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the… NVD-CWE-Other
CVE-2024-45607 2024-09-19 11:05 2024-09-13 Show GitHub Exploit DB Packet Storm
319692 8.8 HIGH
Network
rockwellautomation 2800c_optixpanel_compact_firmware
2800s_optixpanel_standard_firmware
embedded_edge_compute_module_firmware
A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials an… CWE-276
Incorrect Default Permissions 
CVE-2024-8533 2024-09-19 10:57 2024-09-13 Show GitHub Exploit DB Packet Storm
319693 9.8 CRITICAL
Network
rockwellautomation pavilion8 A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could upload arbitrary files to the server that could result in a remote code execut… CWE-22
Path Traversal
CVE-2024-7961 2024-09-19 10:52 2024-09-13 Show GitHub Exploit DB Packet Storm
319694 9.1 CRITICAL
Network
rockwellautomation pavilion8 The Rockwell Automation affected product contains a vulnerability that allows a threat actor to view sensitive information and change settings. The vulnerability exists due to having an incorrect pri… NVD-CWE-noinfo
CVE-2024-7960 2024-09-19 10:52 2024-09-13 Show GitHub Exploit DB Packet Storm
319695 4.3 MEDIUM
Network
lenovo xclarity_administrator A valid, authenticated LXCA user may be able to unmanage an LXCA managed device in through the LXCA web interface without sufficient privileges. NVD-CWE-noinfo
CVE-2024-45103 2024-09-19 10:50 2024-09-14 Show GitHub Exploit DB Packet Storm
319696 6.5 MEDIUM
Network
lenovo xclarity_administrator A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call. NVD-CWE-noinfo
CVE-2024-45104 2024-09-19 10:49 2024-09-14 Show GitHub Exploit DB Packet Storm
319697 9.8 CRITICAL
Network
heyewei jfinalcms A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads t… CWE-22
Path Traversal
CVE-2024-8782 2024-09-19 10:46 2024-09-14 Show GitHub Exploit DB Packet Storm
319698 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: Encryption procedure host vulnerability NVD-CWE-noinfo
CVE-2024-5754 2024-09-19 10:44 2024-09-14 Show GitHub Exploit DB Packet Storm
319699 6.5 MEDIUM
Adjacent
zephyrproject zephyr BT: Missing length checks of net_buf in rfcomm_handle_data CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2024-6258 2024-09-19 10:40 2024-09-14 Show GitHub Exploit DB Packet Storm
319700 9.8 CRITICAL
Network
mayurik best_free_law_office_management SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/con… CWE-89
SQL Injection
CVE-2024-44430 2024-09-19 10:38 2024-09-14 Show GitHub Exploit DB Packet Storm