Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3261	6.5	警告 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-33569	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3262	4.3	警告 Network	SAP	SAP HANA Database Explorer SAP HANA Cockpit	SAPのSAP HANA Cockpit等の複数製品における認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-34262	2026-05-7 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

3263	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-35061	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3264	9.8	緊急 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35546	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3265	8.8	重要 Network	Anviz Global	Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmwareにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-35682	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

3266	7.5	重要 Network	Belkin International	N300 firmware	U-SpeedのN300 Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-36958	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

3267	7.5	重要 Network	Belkin International	N300 firmware	U-SpeedのN300 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-36959	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

3268	8.8	重要 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品におけるダウンロードしたコードの完全性検証不備に関する脆弱性	CWE-494 ダウンロードしたコードの完全性検証不備	CVE-2026-40066	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

3269	8.1	重要 Adjacent	Anviz Global	Crosschex Standard	Anviz GlobalのCrosschex Standardにおける通信チャネルの送信元の不適切な検証に関する脆弱性	CWE-940 通信チャネルの送信元の不適切な検証	CVE-2026-40434	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

3270	7.5	重要 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-40461	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2331	9.8	CRITICAL Network	nvidia	isaac_launchable	NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text. A successful exploit of this vulnerability might lead to code execution, escalatio…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2026-24212	2026-05-27 22:48	2026-05-27	Show	GitHub Exploit DB Packet Storm

2332	6.1	MEDIUM Network	joomla	joomla\!	Lack of output escaping leads to a XSS vector in the feed modules.	CWE-79 Cross-site Scripting	CVE-2026-25900	2026-05-27 22:41	2026-05-27	Show	GitHub Exploit DB Packet Storm

2333	6.1	MEDIUM Network	joomla	joomla\!	Lack of output escaping leads to a XSS vector in the multilingual associations component.	CWE-79 Cross-site Scripting	CVE-2026-25901	2026-05-27 22:40	2026-05-27	Show	GitHub Exploit DB Packet Storm

2334	6.1	MEDIUM Network	joomla	joomla\!	Lack of output escaping leads to a XSS vector in the content history component.	CWE-79 Cross-site Scripting	CVE-2026-30894	2026-05-27 22:29	2026-05-27	Show	GitHub Exploit DB Packet Storm

2335	6.1	MEDIUM Network	joomla	joomla\!	Lack of output escaping leads to a XSS vector in the readmore links for com_content.	CWE-79 Cross-site Scripting	CVE-2026-30895	2026-05-27 22:28	2026-05-27	Show	GitHub Exploit DB Packet Storm

2336	4.3	MEDIUM Network	joomla	joomla\!	Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.	CWE-352 Origin Validation Error	CVE-2026-35220	2026-05-27 22:18	2026-05-27	Show	GitHub Exploit DB Packet Storm

2337	9.8	CRITICAL Network	joomla	joomla\!	Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.	CWE-89 SQL Injection	CVE-2026-35221	2026-05-27 22:05	2026-05-27	Show	GitHub Exploit DB Packet Storm

2338	9.8	CRITICAL Network	joomla	joomla\!	Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.	CWE-89 SQL Injection	CVE-2026-35222	2026-05-27 21:28	2026-05-27	Show	GitHub Exploit DB Packet Storm

2339	9.8	CRITICAL Network	joomla	joomla\!	An improper validation of user-supplied input leads to a local file inclusion vulnerability.	CWE-22 Path Traversal	CVE-2026-40383	2026-05-27 21:24	2026-05-27	Show	GitHub Exploit DB Packet Storm

2340	7.5	HIGH Network	microsoft	global_secure_access	Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.	CWE-269 Improper Privilege Management	CVE-2026-23663	2026-05-27 21:16	2026-05-23	Show	GitHub Exploit DB Packet Storm