Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1131 4.9 警告
Network 		PaperCut Software International Pty PaperCut NG
PaperCut MF 		PaperCut Software International PtyのPaperCut MF等の複数製品における複数の脆弱性 CWE-36
CWE-552
CVE-2026-6418 2026-05-14 10:15 2026-05-5 Show GitHub Exploit DB Packet Storm
1132 9.8 緊急
Network 		The PHP Group PHP The PHP GroupのPHPにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6722 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1133 6.1 警告
Network 		The PHP Group PHP The PHP GroupのPHPにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6735 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1134 5.3 警告
Network 		Eclipse Foundation Vert.x Eclipse FoundationのVert.xにおける複数の脆弱性 CWE-295
CWE-770
CVE-2026-6860 2026-05-14 10:15 2026-05-6 Show GitHub Exploit DB Packet Storm
1135 7.5 重要
Network 		The PHP Group PHP The PHP GroupのPHPにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-7258 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1136 6.5 警告
Network 		The PHP Group PHP The PHP GroupのPHPにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-7259 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1137 9.8 緊急
Network 		The PHP Group PHP The PHP GroupのPHPにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7261 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1138 7.5 重要
Network 		The PHP Group PHP The PHP GroupのPHPにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-7262 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1139 7.5 重要
Network 		The PHP Group PHP The PHP GroupのPHPにおける複数の脆弱性 CWE-404
CWE-835
CVE-2026-7263 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1140 4.4 警告
Local 		Ivanti secure access client Ivantiのsecure access clientにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-7431 2026-05-14 10:15 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312011 5.4 MEDIUM
Network 		kraftplugins demo_importer_plus The Demo Importer Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.1 due to insufficient input sanitization and ou… CWE-79
Cross-site Scripting 		CVE-2024-9172 2024-10-9 03:05 2024-10-2 Show GitHub Exploit DB Packet Storm
312012 7.5 HIGH
Network 		cisco meraki_z4c_firmware
meraki_z4_firmware
meraki_z3c_firmware
meraki_z3_firmware
meraki_vmx_firmware
meraki_mx600_firmware
meraki_mx450_firmware
meraki_mx400_firmware
meraki_mx25… 		Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS cond… CWE-787
 Out-of-bounds Write 		CVE-2024-20499 2024-10-9 02:45 2024-10-3 Show GitHub Exploit DB Packet Storm
312013 7.5 HIGH
Network 		cisco meraki_z4c_firmware
meraki_z4_firmware
meraki_z3c_firmware
meraki_z3_firmware
meraki_vmx_firmware
meraki_mx600_firmware
meraki_mx450_firmware
meraki_mx400_firmware
meraki_mx25… 		A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in … CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-20500 2024-10-9 02:37 2024-10-3 Show GitHub Exploit DB Packet Storm
312014 - - - An issue in Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things System v.1.9.1 allows a remote attacker to escalate privileges via the open port. - CVE-2024-44439 2024-10-9 01:35 2024-10-5 Show GitHub Exploit DB Packet Storm
312015 5.4 MEDIUM
Network 		memberful memberful The Memberful – Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'memberful_buy_subscription_link' and 'memberful_podcasts_link' shortcodes in all … CWE-79
Cross-site Scripting 		CVE-2024-9242 2024-10-9 01:26 2024-10-4 Show GitHub Exploit DB Packet Storm
312016 4.8 MEDIUM
Network 		wpbookingcalendar wp_booking_calendar The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 10.6 due to insufficient input sanitization and outp… CWE-79
Cross-site Scripting 		CVE-2024-9306 2024-10-9 01:25 2024-10-4 Show GitHub Exploit DB Packet Storm
312017 6.1 MEDIUM
Network 		plainware shiftcontroller The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL keys in all versions up to, and including, 4.9.66 due to insufficient input … CWE-79
Cross-site Scripting 		CVE-2024-9435 2024-10-9 01:22 2024-10-4 Show GitHub Exploit DB Packet Storm
312018 5.4 MEDIUM
Network 		sigmadevs easy_demo_importer The Easy Demo Importer – A Modern One-Click Demo Import Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.2 due… CWE-79
Cross-site Scripting 		CVE-2024-9071 2024-10-9 01:21 2024-10-4 Show GitHub Exploit DB Packet Storm
312019 4.3 MEDIUM
Adjacent 		cisco ios_xe A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of an affected device. This vulnerabili… CWE-190
 Integer Overflow or Wraparound 		CVE-2024-20434 2024-10-9 01:20 2024-09-26 Show GitHub Exploit DB Packet Storm
312020 5.4 MEDIUM
Network 		remilia re\ The Re:WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping… CWE-79
Cross-site Scripting 		CVE-2024-9271 2024-10-9 01:17 2024-10-4 Show GitHub Exploit DB Packet Storm