Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1301	5.4	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-8539	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1302	5.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-8541	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1303	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-8542	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1304	5.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-8543	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1305	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-8544	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1306	3.1	低 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける複数の脆弱性	CWE-119 CWE-284	CVE-2026-8545	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1307	5.3	警告 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-8546	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1308	7.5	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-8547	2026-05-21 10:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1309	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-8548	2026-05-21 10:48	2026-05-14	Show	GitHub Exploit DB Packet Storm

1310	8.8	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-8549	2026-05-21 10:48	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2871	6.5	MEDIUM Network	-	-	e107 is a content management system (CMS). Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how session_handler::check…	CWE-285 CWE-352 Improper Authorization Origin Validation Error	CVE-2026-46620	2026-05-28 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2872	5.9	MEDIUM Network	-	-	WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes the submitted password using PHP's hash() function with the SHA-256 algorith…	CWE-759 CWE-916 Use of a One-Way Hash without a Salt Use of Password Hash With Insufficient Computational Effort	CVE-2026-45027	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2873	8.7	HIGH Network	-	-	FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in remediation verification …	CWE-79 Cross-site Scripting	CVE-2026-44667	2026-05-28 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2874	6.1	MEDIUM Adjacent	-	-	Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the UE Security Capabilities received in NGAP PathSwitchRequest messages against its locally stored va…	CWE-358 Improperly Implemented Security Check for Standard	CVE-2026-44475	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2875	3.7	LOW Adjacent	-	-	Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 §6.9.5.1 — it could se…	CWE-358 Improperly Implemented Security Check for Standard	CVE-2026-44474	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2876	7.1	HIGH Adjacent	-	-	Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP-ID. Ella Core does…	CWE-358 CWE-863 Improperly Implemented Security Check for Standard Incorrect Authorization	CVE-2026-44473	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2877	-		-	-	A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff (Latest as of 2026-02-27) via injecting a crafted payload.	-	CVE-2026-38931	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2878	4.3	MEDIUM Network	-	-	Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Account Manager for WooCom…	CWE-862 Missing Authorization	CVE-2022-41656	2026-05-28 02:16	2026-05-28	Show	GitHub Exploit DB Packet Storm

2879	7.5	HIGH Network	ibm	http_server	IBM HTTP Server 8.5, and 9.0	CWE-94 Code Injection	CVE-2026-9170	2026-05-28 02:07	2026-05-27	Show	GitHub Exploit DB Packet Storm

2880	9.8	CRITICAL Network	microsoft	power_pages	Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.	CWE-77 Command Injection	CVE-2026-23652	2026-05-28 02:01	2026-05-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed