Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1691	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43294	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

1692	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43295	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

1693	3.7	低 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-43514	2026-05-18 12:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

1694	7.5	重要 Network		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-43652	2026-05-18 12:13	2026-05-11	Show	GitHub Exploit DB Packet Storm

1695	7.5	重要 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-43654	2026-05-18 12:13	2026-05-11	Show	GitHub Exploit DB Packet Storm

1696	10	緊急 Network	vm2 project	vm2	vm2 projectのvm2におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-43997	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

1697	8.5	重要 Network	vm2 project	vm2	vm2 projectのvm2におけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-43998	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

1698	9.9	緊急 Network	vm2 project	vm2	vm2 projectのvm2における不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-43999	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

1699	7.2	重要 Network	vm2 project	vm2	vm2 projectのvm2における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-44000	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

1700	8.6	重要 Network	vm2 project	vm2	vm2 projectのvm2におけるキャッチされない例外に関する脆弱性	CWE-248 キャッチされない例外	CVE-2026-44001	2026-05-18 12:13	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311421	7.5	HIGH Network	-	-	A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-se…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2020-25720	2024-11-19 02:11	2024-11-17	Show	GitHub Exploit DB Packet Storm

311422	-		-	-	The Login using WordPress Users ( WP as SAML IDP ) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.15.6 due to insufficie…	CWE-89 SQL Injection	CVE-2024-9887	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311423	6.4	MEDIUM Network	-	-	The Mapster WP Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the popup class parameter in all versions up to, and including, 1.6.0 due to insufficient input sanitization …	CWE-80 Basic XSS	CVE-2024-10592	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311424	7.5	HIGH Network	-	-	The Blogger 301 Redirect plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘br’ parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the us…	CWE-89 SQL Injection	CVE-2024-10645	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311425	4.3	MEDIUM Network	-	-	The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cancel_import() function in all versions up to, and including, …	CWE-862 Missing Authorization	CVE-2024-10614	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311426	8.8	HIGH Network	-	-	The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_re…	CWE-862 Missing Authorization	CVE-2024-10728	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311427	6.1	MEDIUM Network	-	-	The Bounce Handler MailPoet 3 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.3.21 due to insufficient input sani…	CWE-79 Cross-site Scripting	CVE-2024-9938	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311428	6.4	MEDIUM Network	-	-	The SVG Case Study plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output e…	CWE-79 Cross-site Scripting	CVE-2024-9850	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311429	-		-	-	The BulkPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 0.3.5.…	CWE-79 Cross-site Scripting	CVE-2024-9615	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

311430	6.4	MEDIUM Network	-	-	The Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.4 du…	CWE-79 Cross-site Scripting	CVE-2024-9386	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm