Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1531	7.8	重要 Local	GitHub	GitHub Copilot CLI	GitHubのGitHub Copilot CLIにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-29783	2026-05-20 13:22	2026-03-6	Show	GitHub Exploit DB Packet Storm

1532	10	緊急 Network	DHTMLX	PDF Export Module	DHTMLXのPDF Export ModuleにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-41553	2026-05-20 13:22	2026-05-15	Show	GitHub Exploit DB Packet Storm

1533	8.8	重要 Network	huggingface	Diffusers	huggingfaceのDiffusersにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-44513	2026-05-20 13:22	2026-05-14	Show	GitHub Exploit DB Packet Storm

1534	8.8	重要 Network	huggingface	Diffusers	huggingfaceのDiffusersにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-44827	2026-05-20 13:22	2026-05-14	Show	GitHub Exploit DB Packet Storm

1535	7.1	重要 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-45242	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1536	6.1	警告 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-45243	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1537	5.4	警告 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-45244	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1538	7.4	重要 Network	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける複数の脆弱性	CWE-918 CWE-940	CVE-2026-45245	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1539	5.5	警告 Local	Peter Steinberger (steipete)	Summarize	Peter Steinberger (steipete)のSummarizeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-45246	2026-05-20 13:22	2026-05-18	Show	GitHub Exploit DB Packet Storm

1540	9.8	緊急 Network	IBM	IBM Total Storage Service Console (TSSC) TS4500 IMC	IBMのIBM Total Storage Service Console (TSSC)等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-5935	2026-05-20 13:21	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319211	6.1	MEDIUM Network	nextbricks	bricksore	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nextbricks Brickscore allows Stored XSS.This issue affects Brickscore: from n/a through 1.…	CWE-79 Cross-site Scripting	CVE-2024-43950	2024-08-31 01:20	2024-08-30	Show	GitHub Exploit DB Packet Storm

319212	7.5	HIGH Network	frrouting redhat	frrouting enterprise_linux	An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.	NVD-CWE-noinfo	CVE-2024-44070	2024-08-31 01:19	2024-08-19	Show	GitHub Exploit DB Packet Storm

319213	5.4	MEDIUM Network	cryoutcreations	tempera	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8…	CWE-79 Cross-site Scripting	CVE-2024-43951	2024-08-31 01:17	2024-08-30	Show	GitHub Exploit DB Packet Storm

319214	5.4	MEDIUM Network	cryoutcreations	esotera	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2…	CWE-79 Cross-site Scripting	CVE-2024-43952	2024-08-31 01:16	2024-08-30	Show	GitHub Exploit DB Packet Storm

319215	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-8064	2024-08-31 01:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319216	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-7712	2024-08-31 01:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319217	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-7051	2024-08-31 01:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319218	6.1	MEDIUM Network	gianniporto	intothedark	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a thr…	CWE-79 Cross-site Scripting	CVE-2024-43958	2024-08-31 01:15	2024-08-30	Show	GitHub Exploit DB Packet Storm

319219	6.5	MEDIUM Network	stitionai	devika	stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read (LFI) by Prompt Injection. The integration of Google Gimini 1.0 Pro with `HarmBlock…	CWE-74 Injection	CVE-2024-6331	2024-08-31 01:15	2024-08-4	Show	GitHub Exploit DB Packet Storm

319220	4.8	MEDIUM Network	pagebuilderaddons	web_and_woocommerce_addons_for_wpbakery_builder	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Page Builder Addons Web and WooCommerce Addons for WPBakery Builder allows Stored XSS.This…	CWE-79 Cross-site Scripting	CVE-2024-43960	2024-08-31 01:12	2024-08-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed