Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1501 6.5 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおける不正な正規表現に関する脆弱性 CWE-185
不正な正規表現 		CVE-2026-25542 2026-05-7 12:06 2026-04-21 Show GitHub Exploit DB Packet Storm
1502 6.5 警告
Adjacent 		FRRouting Project FRRouting FRRouting ProjectのFRRoutingにおける複数の脆弱性 CWE-125
CWE-190
CVE-2026-28532 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
1503 8.8 重要
Network 		CloudARK KubePlus CloudARKのKubePlusにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-29955 2026-05-7 12:06 2026-04-13 Show GitHub Exploit DB Packet Storm
1504 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける領域間での誤ったリソース移動に関する脆弱性 CWE-669
領域間での誤ったリソース移動 		CVE-2026-31431 2026-05-7 12:06 2026-04-22 Show GitHub Exploit DB Packet Storm
1505 5.3 警告
Network 		レッドハット
kernel.org		 util-linux
Red Hat Hardened Images 		kernel.org等の複数ベンダの製品における代替名による認証回避に関する脆弱性 CWE-289
代替名による認証回避 		CVE-2026-3184 2026-05-7 12:06 2026-04-3 Show GitHub Exploit DB Packet Storm
1506 5.5 警告
Local 		Electron electron Electronのelectronにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-34764 2026-05-7 12:06 2026-04-6 Show GitHub Exploit DB Packet Storm
1507 10 緊急
Network 		traefik traefik traefikにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-35051 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
1508 7.1 重要
Network 		デル iDRAC10 Firmware デルのiDRAC10 Firmwareにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-35155 2026-05-7 12:06 2026-04-29 Show GitHub Exploit DB Packet Storm
1509 7.2 重要
Network 		Progress Software Corporation ECS Connection Manager
loadmaster
Connection Manager for ObjectScale 		Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-3517 2026-05-7 12:06 2026-04-20 Show GitHub Exploit DB Packet Storm
1510 7.2 重要
Network 		Progress Software Corporation ECS Connection Manager
loadmaster
Connection Manager for ObjectScale 		Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-3518 2026-05-7 12:06 2026-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312701 6.2 MEDIUM
Local 		consensys gnark-crypto gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover … NVD-CWE-noinfo
CVE-2024-45039 2024-09-20 09:12 2024-09-6 Show GitHub Exploit DB Packet Storm
312702 8.8 HIGH
Network 		thimpress wp_events_manager The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user su… CWE-89
SQL Injection 		CVE-2024-7717 2024-09-20 09:08 2024-08-31 Show GitHub Exploit DB Packet Storm
312703 5.3 MEDIUM
Network 		wpcerber cerber_security_antispam_\&_malware_scan The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it … NVD-CWE-noinfo
CVE-2022-4100 2024-09-20 09:08 2024-08-31 Show GitHub Exploit DB Packet Storm
312704 5.3 MEDIUM
Network 		youtag ip-vault-wp-firewall The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address informatio… NVD-CWE-Other
CVE-2022-4536 2024-09-20 09:04 2024-08-31 Show GitHub Exploit DB Packet Storm
312705 6.3 MEDIUM
Network 		microsoft edge_chromium Microsoft Edge (HTML-based) Memory Corruption Vulnerability CWE-787
 Out-of-bounds Write 		CVE-2024-38207 2024-09-20 07:15 2024-08-24 Show GitHub Exploit DB Packet Storm
312706 7.8 HIGH
Local 		microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-125
Out-of-bounds Read 		CVE-2024-38210 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm
312707 7.8 HIGH
Local 		microsoft edge_chromium Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CWE-843
Type Confusion 		CVE-2024-38209 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm
312708 6.1 MEDIUM
Network 		microsoft edge Microsoft Edge for Android Spoofing Vulnerability CWE-79
Cross-site Scripting 		CVE-2024-38208 2024-09-20 07:15 2024-08-23 Show GitHub Exploit DB Packet Storm
312709 5.4 MEDIUM
Network 		wpbeaveraddons powerpack_lite_for_beaver_builder The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and including, 2.8.3.5 due to insufficien… CWE-79
Cross-site Scripting 		CVE-2024-7895 2024-09-20 07:13 2024-08-29 Show GitHub Exploit DB Packet Storm
312710 5.4 MEDIUM
Network 		funnelkit funnel_builder The FunnelKit Funnel Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allow_iframe_tag_in_post' function which uses the 'wp_kses_allowed_html' filter to globally… CWE-79
Cross-site Scripting 		CVE-2024-1056 2024-09-20 07:06 2024-08-29 Show GitHub Exploit DB Packet Storm