Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1101 7.8 重要
Local 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-37526 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
1102 9.8 緊急
Network 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおける複数の脆弱性 CWE-22
CWE-367
CVE-2026-37531 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
1103 6.5 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40016 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
1104 4.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-40020 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
1105 7.8 重要
Local 		マイクロソフト Azure Connected Machine Agent Azure Connected Machine Agent の特権の昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-40381 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
1106 9.8 緊急
Network 		エレコム株式会社 WRC-XE5400GS-G
WRC-BE72XSD-B
WAB-BE72-M
WRC-X1800GS-B
WRC-BE65QSD-B
WRC-X6000QSA-G
WRC-X3000GS2A-B
WRC-W702-B
WRC-X6000XS-G
WAB-BE36-M
WRC-X6000XST-G
WRC-X3000GS2-B 		エレコム製無線LANルーターおよび無線アクセスポイントにおける複数の脆弱性（2026年5月） CWE-78
CWE-79
CWE-Other
CVE-2026-25107
CVE-2026-35506
CVE-2026-40621
CVE-2026-42062
CVE-2026-42948
CVE-2026-42950
CVE-2026-42961 		2026-05-19 17:24 2026-05-12 Show GitHub Exploit DB Packet Storm
1107 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月14日） - - 2026-05-18 14:06 2026-05-15 Show GitHub Exploit DB Packet Storm
1108 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71297 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
1109 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71298 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
1110 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71299 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311251 8.8 HIGH
Network 		newspack newspack Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6. CWE-862
 Missing Authorization 		CVE-2024-43968 2024-11-9 05:43 2024-11-2 Show GitHub Exploit DB Packet Storm
311252 8.8 HIGH
Network 		lws affiliation Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4. CWE-862
 Missing Authorization 		CVE-2024-43962 2024-11-9 05:42 2024-11-2 Show GitHub Exploit DB Packet Storm
311253 5.3 MEDIUM
Network 		humhub humhub Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1… CWE-209
Information Exposure Through an Error Message 		CVE-2024-52043 2024-11-9 05:39 2024-11-6 Show GitHub Exploit DB Packet Storm
311254 8.1 HIGH
Network 		heateor super_socializer The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.13.68. This is due to … NVD-CWE-noinfo
CVE-2024-9946 2024-11-9 05:38 2024-11-6 Show GitHub Exploit DB Packet Storm
311255 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 ("firewire: core: use helper functions for self… NVD-CWE-noinfo
CVE-2024-50113 2024-11-9 05:37 2024-11-6 Show GitHub Exploit DB Packet Storm
311256 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: x86/lam: Disable ADDRESS_MASKING in most cases Linear Address Masking (LAM) has a weakness related to transient execution as desc… NVD-CWE-noinfo
CVE-2024-50112 2024-11-9 05:36 2024-11-6 Show GitHub Exploit DB Packet Storm
311257 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context Unaligned access exception can be triggered in irq-enabled con… NVD-CWE-noinfo
CVE-2024-50111 2024-11-9 05:32 2024-11-6 Show GitHub Exploit DB Packet Storm
311258 5.4 MEDIUM
Network 		fatcatapps easy_pricing_tables The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 … CWE-79
Cross-site Scripting 		CVE-2024-8323 2024-11-9 05:30 2024-11-6 Show GitHub Exploit DB Packet Storm
311259 5.4 MEDIUM
Network 		pluginus woot The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's woot_button shortcode in all versions u… CWE-79
Cross-site Scripting 		CVE-2024-10168 2024-11-9 05:27 2024-11-6 Show GitHub Exploit DB Packet Storm
311260 5.4 MEDIUM
Network 		mappresspro mappress The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input san… CWE-79
Cross-site Scripting 		CVE-2024-10715 2024-11-9 05:25 2024-11-6 Show GitHub Exploit DB Packet Storm