Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1771	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28904	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1772	7.5	重要 Network	アップル	iOS iPadOS tvOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28905	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1773	7.5	重要 Network		-	アップルのmacOSにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28908	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1774	7.5	重要 Network	アップル	iOS iPadOS tvOS watchOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28913	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1775	7.8	重要 Local		-	アップルのmacOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-28919	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1776	8.8	重要 Local		-	アップルのmacOSにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2026-28923	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1777	7.5	重要 Network		-	アップルのmacOSにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-28924	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1778	7.5	重要 Network		-	アップルのmacOSにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-28925	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1779	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な比較ロジックの粒度に関する脆弱性	CWE-1254 不正な比較ロジックの粒度	CVE-2026-28929	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

1780	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28944	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311751	9.8	CRITICAL Network	riskengine	radar	A vulnerability was found in wfh45678 Radar up to 1.0.8 and classified as critical. This issue affects some unknown processing of the component Interface Handler. The manipulation with the input /../…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2024-10121	2024-10-31 06:21	2024-10-19	Show	GitHub Exploit DB Packet Storm

311752	7.8	HIGH Local	helakuru	helakuru	An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file.	CWE-427 Uncontrolled Search Path Element	CVE-2024-48605	2024-10-31 06:19	2024-10-23	Show	GitHub Exploit DB Packet Storm

311753	4.9	MEDIUM Network	i13websolution	photo_gallery_slideshow_\&_masonry_tiled_gallery	The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping…	CWE-89 SQL Injection	CVE-2019-25218	2024-10-31 06:18	2024-10-19	Show	GitHub Exploit DB Packet Storm

311754	4.3	MEDIUM Network	nofusscomputing	centurion_erp	No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an authenticated user can view projects within organizations they are not apart of.…	NVD-CWE-noinfo	CVE-2024-49373	2024-10-31 06:16	2024-10-23	Show	GitHub Exploit DB Packet Storm

311755	6.5	MEDIUM Network	shudong-share_project	shudong-share	A vulnerability classified as critical has been found in HFO4 shudong-share up to 2.4.7. This affects an unknown part of the file /includes/create_share.php of the component Share Handler. The manipu…	CWE-89 SQL Injection	CVE-2024-10129	2024-10-31 06:15	2024-10-19	Show	GitHub Exploit DB Packet Storm

311756	9.8	CRITICAL Network	najeebmedia	frontend_file_manager post_front-end_form	The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are vulnerable to arbitrary file uploads due to missing file type validation via the `nm…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2016-15042	2024-10-31 06:12	2024-10-16	Show	GitHub Exploit DB Packet Storm

311757	9.8	CRITICAL Network	themehunk	wp_popup_builder	The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add AJAX action in all ve…	CWE-94 Code Injection	CVE-2024-9061	2024-10-31 06:11	2024-10-16	Show	GitHub Exploit DB Packet Storm

311758	6.5	MEDIUM Network	suse	rancher	A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https://ranchermanager.docs.rancher.com/how-to-guides/advanced-use…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2023-22649	2024-10-31 06:08	2024-10-16	Show	GitHub Exploit DB Packet Storm

311759	9.8	CRITICAL Network	motopress	timetable_and_event_schedule	The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_route_url() function called via a nopriv AJAX…	CWE-862 Missing Authorization	CVE-2020-36840	2024-10-31 06:06	2024-10-16	Show	GitHub Exploit DB Packet Storm

311760	8.8	HIGH Network	wpvivid	migration\ _backup\ _staging	The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJA…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-36842	2024-10-31 06:03	2024-10-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed