Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
71 9.8 緊急
Network
Joomla! Joomla! Joomla!におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40383 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
72 7.2 重要
Network
IBM Engineering Lifecycle Management IBMのEngineering Lifecycle Managementにおける危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開
CVE-2026-4051 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
73 6.5 警告
Network
struktur AG libheif struktur AGのlibheifにおける複数の脆弱性 CWE-125
CWE-476
CVE-2026-41069 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
74 8.1 重要
Network
struktur AG libheif struktur AGのlibheifにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-41071 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
75 9.3 緊急
Network
マイクロソフト Microsoft 365 Copilot Microsoft Copilot Tampering Vulnerability CWE-77
コマンドインジェクション
CVE-2026-41090 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
76 7.2 重要
Network
Apache Software Foundation Apache Syncope Apache Software FoundationのApache Syncopeにおける隔離または分類に関する脆弱性 CWE-653
不適切な隔離または分類
CVE-2026-42782 2026-05-29 11:17 2026-05-25 Show GitHub Exploit DB Packet Storm
77 7.5 重要
Network
マイクロソフト Microsoft 365 Copilot M365 Copilot の情報漏えいの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-42827 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
78 10 緊急
Network
マイクロソフト Microsoft Entra ID Microsoft Entra ID の特権昇格の脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-42901 2026-05-29 11:17 2026-05-22 Show GitHub Exploit DB Packet Storm
79 4.3 警告
Network
Traccar Ltd Traccar Traccar LtdのTraccarにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-44314 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
80 8.7 重要
Network
Twenty.com PBC Twenty Twenty.com PBCのTwentyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-44729 2026-05-29 11:17 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318831 5.3 MEDIUM
Network
lopalopa responsive_school_management_system An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view adminis… NVD-CWE-Other
CVE-2024-41246 2024-08-9 00:08 2024-08-8 Show GitHub Exploit DB Packet Storm
318832 5.3 MEDIUM
Network
lopalopa responsive_school_management_system An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthentica… NVD-CWE-Other
CVE-2024-41248 2024-08-9 00:07 2024-08-8 Show GitHub Exploit DB Packet Storm
318833 5.3 MEDIUM
Network
lopalopa responsive_school_management_system An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view SUBJECT de… NVD-CWE-Other
CVE-2024-41249 2024-08-9 00:06 2024-08-8 Show GitHub Exploit DB Packet Storm
318834 7.8 HIGH
Local
enjayworld enjay_crm An issue in the Ping feature of IT Solutions Enjay CRM OS v1.0 allows attackers to escape the restricted terminal environment and gain root-level privileges on the underlying system. NVD-CWE-noinfo
CVE-2024-41308 2024-08-9 00:04 2024-08-8 Show GitHub Exploit DB Packet Storm
318835 6.5 MEDIUM
Network
lopalopa responsive_school_management_system An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student_register_approval_submit.php in Kashipara Responsive School Management System … NVD-CWE-Other
CVE-2024-41252 2024-08-9 00:04 2024-08-8 Show GitHub Exploit DB Packet Storm
318836 5.3 MEDIUM
Network
likeshop likeshop An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP address with any arbitrary IP address, specifically by adding… CWE-290
 Authentication Bypass by Spoofing
CVE-2024-41432 2024-08-9 00:02 2024-08-8 Show GitHub Exploit DB Packet Storm
318837 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is handled in ceph_monc_stop() is prone to… CWE-416
 Use After Free
CVE-2024-42232 2024-08-9 00:02 2024-08-8 Show GitHub Exploit DB Packet Storm
318838 3.3 LOW
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: filemap: replace pte_offset_map() with pte_offset_map_nolock() The vmf->ptl in filemap_fault_recheck_pte_none() is still set from… NVD-CWE-noinfo
CVE-2024-42233 2024-08-8 23:56 2024-08-8 Show GitHub Exploit DB Packet Storm
318839 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() crst_table_free() used to work with NULL pointers before th… CWE-476
 NULL Pointer Dereference
CVE-2024-42235 2024-08-8 23:55 2024-08-8 Show GitHub Exploit DB Packet Storm
318840 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s (often on… CWE-415
 Double Free
CVE-2024-42234 2024-08-8 23:55 2024-08-8 Show GitHub Exploit DB Packet Storm