Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
741 5.4 警告
Network 		ABB T-MAC Plus ABBのT-MAC Plusにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-14773 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
742 7.4 重要
Adjacent 		ABB T-MAC Plus ABBのT-MAC Plusにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2025-14774 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
743 5.4 警告
Network 		Koha Koha Kohaにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-26378 2026-06-8 11:50 2026-06-3 Show GitHub Exploit DB Packet Storm
744 7.8 重要
Local 		Canonical Ubuntu CanonicalのUbuntuにおける権限の連鎖に関する脆弱性 New CWE-268
権限の連鎖 		CVE-2026-3888 2026-06-8 11:50 2026-03-17 Show GitHub Exploit DB Packet Storm
745 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-49185 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
746 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける認証に関する脆弱性 New CWE-287
不適切な認証 		CVE-2026-49186 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
747 7.5 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-49187 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
748 9.8 緊急
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおけるアクティブ状態のデバッグコードに関する脆弱性 New CWE-489
間違ったセッションへのデータの漏洩 		CVE-2026-49188 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
749 7.8 重要
Local 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G Firmwareにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-49189 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
750 8.8 重要
Network 		日本エイサー Acer Connect M6E 5G Firmware エイサーのAcer Connect M6E 5G FirmwareにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-49190 2026-06-8 11:50 2026-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319251 7.2 HIGH
Network 		funnelforms funnelforms_free The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'af2_add_font' function in all versions up to, and including, 3.7.3.2. Thi… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-6311 2024-09-13 01:46 2024-08-28 Show GitHub Exploit DB Packet Storm
319252 7.5 HIGH
Network 		eclipse vert.x In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client).  This is fix… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-8391 2024-09-13 01:44 2024-09-5 Show GitHub Exploit DB Packet Storm
319253 5.5 MEDIUM
Local 		dpgaspar flask_app_builder Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue … NVD-CWE-Other
CVE-2024-45314 2024-09-13 01:39 2024-09-5 Show GitHub Exploit DB Packet Storm
319254 5.4 MEDIUM
Network 		wpsocio wp_telegram_widget_and_join_link Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link allows Stored XSS.This issue affects WP Telegram… CWE-79
Cross-site Scripting 		CVE-2024-43309 2024-09-13 01:39 2024-08-19 Show GitHub Exploit DB Packet Storm
319255 - - - SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component. - CVE-2024-42760 2024-09-13 01:35 2024-09-12 Show GitHub Exploit DB Packet Storm
319256 5.4 MEDIUM
Network 		gutentor gutentor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gutentor Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor allows Stored XSS… CWE-79
Cross-site Scripting 		CVE-2024-43308 2024-09-13 01:30 2024-08-19 Show GitHub Exploit DB Packet Storm
319257 5.1 MEDIUM
Local 		arm mbed_tls An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not… NVD-CWE-noinfo
CVE-2024-45157 2024-09-13 01:29 2024-09-6 Show GitHub Exploit DB Packet Storm
319258 9.8 CRITICAL
Network 		mi file_manager A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attac… CWE-22
Path Traversal 		CVE-2023-26321 2024-09-13 01:29 2024-08-28 Show GitHub Exploit DB Packet Storm
319259 7.1 HIGH
Network 		dylanjkotze zephyr_project_manager Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.102. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-43916 2024-09-13 01:21 2024-08-27 Show GitHub Exploit DB Packet Storm
319260 5.4 MEDIUM
Network 		xjd2020 fastcms A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross sit… CWE-79
Cross-site Scripting 		CVE-2024-7733 2024-09-13 01:20 2024-08-14 Show GitHub Exploit DB Packet Storm