Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1101 6.8 警告
Adjacent 		エレコム株式会社 WRC-2533GST2 ファームウェア
WRC-X3000GST2-B
WRC-X1800GS-B
WRC-X6000QSA-G
WRC-2533GS2V-B
WMC-X1800GST-B
WRC-G01-W
WRC-XE5400GS-G
WRC-X1800GSA-B
WRC-X1800GSH-B
WRC-X6000XST-… 		エレコム製無線LANルーターにおける複数の脆弱性 CWE-352
CWE-78
CWE-Other
CVE-2024-34021
CVE-2024-39607
CVE-2024-40883 		2026-05-12 14:51 2024-07-30 Show GitHub Exploit DB Packet Storm
1102 - - ollama ollama Ollamaにおける境界外の読み取りおよび書き込みの脆弱性 - - 2026-05-12 12:34 2026-05-11 Show GitHub Exploit DB Packet Storm
1103 4.9 警告
Network 		キヤノン (複数の製品) キヤノン製プロダクションプリンター、オフィス/スモールオフィス向け複合機における機微な情報を取得可能な脆弱性 CWE-807
セキュリティ決定の信頼できない入力への依存 		CVE-2026-1789 2026-05-12 12:34 2026-05-11 Show GitHub Exploit DB Packet Storm
1104 - - - サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01397他)による影響について - CVE-2025-22885
CVE-2025-27560
CVE-2025-27572
CVE-2025-27940
CVE-2025-30513
CVE-2025-31648
CVE-2025-31944
CVE-2025-32007
CVE-2025-32467 		2026-05-12 11:50 2026-03-27 Show GitHub Exploit DB Packet Storm
1105 - - - サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01234)による影響について - CVE-2025-20027
CVE-2025-20028
CVE-2025-20064
CVE-2025-20068
CVE-2025-20073
CVE-2025-20105
CVE-2025-22444
CVE-2025-22850 		2026-05-12 11:38 2026-04-24 Show GitHub Exploit DB Packet Storm
1106 - - - サーバ製品におけるBIOSの脆弱性(CVE-2026-22796)による影響について - CVE-2026-22796 2026-05-12 11:38 2026-04-24 Show GitHub Exploit DB Packet Storm
1107 5.3 警告
Local 		Prusa3D PrusaSlicer Prusa3DのPrusaSlicerにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2023-47268 2026-05-12 10:21 2026-05-8 Show GitHub Exploit DB Packet Storm
1108 7.2 重要
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2025-31974 2026-05-12 10:21 2026-05-6 Show GitHub Exploit DB Packet Storm
1109 6.1 警告
Network 		Project Jupyter Jupyter Server Project JupyterのJupyter Serverにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-61669 2026-05-12 10:21 2026-05-5 Show GitHub Exploit DB Packet Storm
1110 8.1 重要
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける不完全なクリーンアップに関する脆弱性 CWE-459
不完全なクリーンアップ 		CVE-2025-66467 2026-05-12 10:21 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312111 6.1 MEDIUM
Network 		madfishdigital bulk_noindex_\&_nofollow_toolkit The Bulk NoIndex & NoFollow Toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up … CWE-79
Cross-site Scripting 		CVE-2024-8803 2024-10-3 02:15 2024-09-26 Show GitHub Exploit DB Packet Storm
312112 2.7 LOW
Network 		uncannyowl uncanny_groups_for_learndash The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to user group add due to a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint in all versions … CWE-862
 Missing Authorization 		CVE-2024-8350 2024-10-3 02:10 2024-09-25 Show GitHub Exploit DB Packet Storm
312113 5.4 MEDIUM
Network 		wangbin 012_ps_multi_languages The 012 Ps Multi Languages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via translated titles in all versions up to, and including, 1.6 due to insufficient input sanitization and… CWE-79
Cross-site Scripting 		CVE-2024-8723 2024-10-3 02:00 2024-09-26 Show GitHub Exploit DB Packet Storm
312114 4.3 MEDIUM
Network 		wpchill download_monitor The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enable_shop() function in all versions up to, and including, 5.0.… CWE-862
 Missing Authorization 		CVE-2024-8552 2024-10-3 02:00 2024-09-26 Show GitHub Exploit DB Packet Storm
312115 5.4 MEDIUM
Network 		zkteco wdms Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter. CWE-79
Cross-site Scripting 		CVE-2023-51157 2024-10-3 01:58 2024-09-26 Show GitHub Exploit DB Packet Storm
312116 7.2 HIGH
Network 		uncannyowl uncanny_groups_for_learndash The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what user… CWE-862
 Missing Authorization 		CVE-2024-8349 2024-10-3 01:50 2024-09-25 Show GitHub Exploit DB Packet Storm
312117 6.5 MEDIUM
Network 		madrasthemes mas_static_content The MAS Static Content plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.8 via the static_content() function. This makes it possible for authenticat… NVD-CWE-noinfo
CVE-2024-8483 2024-10-3 01:42 2024-09-25 Show GitHub Exploit DB Packet Storm
312118 6.1 MEDIUM
Network 		outtheboxthemes beam_me_up_scotty The Beam me up Scotty – Back to Top Button plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions… CWE-79
Cross-site Scripting 		CVE-2024-8741 2024-10-3 01:37 2024-09-25 Show GitHub Exploit DB Packet Storm
312119 8.8 HIGH
Network 		ferrislucas promptr A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL. CWE-94
Code Injection 		CVE-2024-46489 2024-10-3 01:24 2024-09-26 Show GitHub Exploit DB Packet Storm
312120 6.1 MEDIUM
Network 		pierros kodex_posts_likes The Kodex Posts likes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including… CWE-79
Cross-site Scripting 		CVE-2024-8713 2024-10-3 01:22 2024-09-25 Show GitHub Exploit DB Packet Storm