Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1671 8.5 重要
Network 		n8n-MCP n8n-MCP n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42449 2026-05-18 12:14 2026-05-7 Show GitHub Exploit DB Packet Storm
1672 7.3 重要
Network 		Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-42498 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1673 9.8 緊急
Network 		archivebox archivebox archiveboxにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-42601 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
1674 8.8 重要
Network 		azuracast azuracast AzuraCastにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-42605 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
1675 8.8 重要
Network 		azuracast azuracast AzuraCastにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2026-42606 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
1676 9.9 緊急
Network 		マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-42823 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1677 7 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows テレフォニー サービスの特権昇格の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-42825 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1678 6.5 警告
Local 		マイクロソフト Azure Monitor Agent Azure Monitor エージェントの拡張機能の特権昇格の脆弱性 CWE-426
信頼性のない検索パス 		CVE-2026-42830 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1679 9.1 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性 CWE-250
CWE-noinfo
CVE-2026-42833 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1680 5.4 警告
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) の特権の昇格の脆弱性 CWE-74
インジェクション 		CVE-2026-42838 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311431 8.8 HIGH
Network 		- - The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_req… CWE-269
 Improper Privilege Management 		CVE-2024-9192 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311432 4.3 MEDIUM
Network 		- - The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.9.9. This is due to mi… CWE-352
 Origin Validation Error 		CVE-2024-6628 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311433 5.3 MEDIUM
Network 		- - The 404 Error Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the updatePlu… CWE-352
 Origin Validation Error 		CVE-2024-11118 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311434 6.4 MEDIUM
Network 		- - The SVGPlus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.1.0 due to insufficient input sanitization and outp… CWE-79
Cross-site Scripting 		CVE-2024-11092 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311435 5.4 MEDIUM
Network 		- - The WP Log Viewer plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on several AJAX actions in all versions up to, and including, 1.2.1. This m… CWE-862
 Missing Authorization 		CVE-2024-11085 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311436 6.1 MEDIUM
Network 		- - The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL… CWE-79
Cross-site Scripting 		CVE-2024-10884 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311437 6.1 MEDIUM
Network 		- - The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the U… CWE-79
Cross-site Scripting 		CVE-2024-10883 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311438 6.1 MEDIUM
Network 		- - The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_Query_Arg without appropriate escaping on the URL in all versions up to, and includin… - CVE-2024-10875 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311439 4.3 MEDIUM
Network 		- - The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the ajax_install_plugin() function in all versions up to, and including, 3.… CWE-862
 Missing Authorization 		CVE-2024-10533 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
311440 - - - The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and outpu… CWE-79
Cross-site Scripting 		CVE-2024-10147 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm