Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
751 6.4 警告
Network 		- SAPのSAP Netweaver Application Server ABAPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-24316 2026-06-5 10:48 2026-03-10 Show GitHub Exploit DB Packet Storm
752 8.2 重要
Network 		Accellion Kiteworks Core AccellionのKiteworks Coreにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24751 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
753 8.2 重要
Network 		Accellion Kiteworks Core AccellionのKiteworks Coreにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24752 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
754 6.5 警告
Network 		Accellion Kiteworks Core AccellionのKiteworks Coreにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-24753 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
755 5.4 警告
Network 		Accellion Kiteworks Core AccellionのKiteworks Coreにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24754 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
756 5.4 警告
Network 		Accellion Kiteworks Core AccellionのKiteworks Coreにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-24755 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
757 4.3 警告
Network 		Accellion Kiteworks Core AccellionのKiteworks Coreにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-24756 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
758 4.3 警告
Network 		Accellion Kiteworks Core AccellionのKiteworks Coreにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-24761 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
759 8.8 重要
Network 		Accellion Kiteworks Core AccellionのKiteworks CoreにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-24782 2026-06-5 10:48 2026-06-1 Show GitHub Exploit DB Packet Storm
760 5.3 警告
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける高圧縮データの処理 (データ増幅)に関する脆弱性 CWE-409
高圧縮データの不適切な処理 (データ増幅) 		CVE-2026-2575 2026-06-5 10:48 2026-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319371 5.3 MEDIUM
Network 		purevpn purevpn PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers. NVD-CWE-noinfo
CVE-2023-48957 2024-09-12 03:07 2024-08-26 Show GitHub Exploit DB Packet Storm
319372 5.4 MEDIUM
Network 		sap netweaver_application_server_abap SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depending on the web applications provided by this server, the … NVD-CWE-noinfo
CVE-2024-41732 2024-09-12 02:52 2024-08-13 Show GitHub Exploit DB Packet Storm
319373 4.3 MEDIUM
Network 		sap business_objects_business_intelligence_platform SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, t… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-41731 2024-09-12 02:48 2024-08-13 Show GitHub Exploit DB Packet Storm
319374 5.4 MEDIUM
Network 		wpeka wp_adcenter The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ad_alignment’ attribute in all versions up to, and including, 2.5.6 due to insuff… CWE-79
Cross-site Scripting 		CVE-2024-8317 2024-09-12 02:46 2024-09-6 Show GitHub Exploit DB Packet Storm
319375 4.3 MEDIUM
Network 		wpshuffle frontend_post_submission_manager The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_glo… CWE-862
 Missing Authorization 		CVE-2024-8427 2024-09-12 02:41 2024-09-6 Show GitHub Exploit DB Packet Storm
319376 8.8 HIGH
Network 		nvidia mlnx-os
mlnx-gw
onyx
nvda-os_xc 		NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might … NVD-CWE-Other
CVE-2024-0104 2024-09-12 02:40 2024-08-9 Show GitHub Exploit DB Packet Storm
319377 4.8 MEDIUM
Network 		themegrill himalayas Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.… CWE-79
Cross-site Scripting 		CVE-2024-39629 2024-09-12 02:35 2024-08-2 Show GitHub Exploit DB Packet Storm
319378 4.8 MEDIUM
Network 		imagely nextgen_gallery Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Imagely NextGEN Gallery allows Stored XSS.This issue affects NextGEN Gallery: from n/a thr… CWE-79
Cross-site Scripting 		CVE-2024-39627 2024-09-12 02:35 2024-08-2 Show GitHub Exploit DB Packet Storm
319379 8.8 HIGH
Network 		nvidia mellanox_os
onyx
skyway
metrox-3_xc
metrox-2 		NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of thi… CWE-22
Path Traversal 		CVE-2024-0113 2024-09-12 02:34 2024-08-12 Show GitHub Exploit DB Packet Storm
319380 6.1 MEDIUM
Network 		metagauss registrationmagic Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RegistrationMagic Forms RegistrationMagic allows Stored XSS.This issue affects Registratio… CWE-79
Cross-site Scripting 		CVE-2024-39643 2024-09-12 02:33 2024-08-2 Show GitHub Exploit DB Packet Storm