Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221 9.1 緊急
Network 		Netty Netty NettyにおけるHTTP リクエストスマグリングに関する脆弱性 New CWE-444
HTTP リクエストスマグリング 		CVE-2026-42584 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
222 7.5 重要
Network 		Netty Netty NettyにおけるHTTP リクエストスマグリングに関する脆弱性 New CWE-444
HTTP リクエストスマグリング 		CVE-2026-42585 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
223 7.1 重要
Local 		Netty Netty NettyにおけるCRLF インジェクションの脆弱性 New CWE-93
CRLF インジェクション 		CVE-2026-42586 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
224 7.5 重要
Network 		Netty Netty Nettyにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-42587 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
225 9.8 緊急
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-42589 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
226 8.2 重要
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける不完全なブラックリストに関する脆弱性 New CWE-184
不完全なブラックリスト 		CVE-2026-42590 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
227 8.2 重要
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42591 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
228 5.3 警告
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける複数の脆弱性 New CWE-367
CWE-918
CVE-2026-42592 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
229 5.3 警告
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける複数の脆弱性 New CWE-22
CWE-73
CVE-2026-42593 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
230 7.5 重要
Network 		TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける競合状態に関する脆弱性 New CWE-362
競合状態 		CVE-2026-42594 2026-05-20 13:29 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311691 7.4 HIGH
Network 		- - The Facebook Chat Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wp_ajax_update_options function in versions up to, and including, 1.5. This flaw … CWE-284
Improper Access Control 		CVE-2020-36838 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311692 9.9 CRITICAL
Network 		- - The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This m… CWE-862
 Missing Authorization 		CVE-2020-36837 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311693 6.3 MEDIUM
Network 		- - The Discount Rules for WooCommerce plugin for WordPress is vulnerable to missing authorization via several AJAX actions in versions up to, and including, 2.0.2 due to missing capability checks on var… CWE-862
 Missing Authorization 		CVE-2020-36834 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311694 6.3 MEDIUM
Network 		- - The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions in versions 7.3 - 8.6. This makes it possible for authent… CWE-862
 Missing Authorization 		CVE-2020-36833 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311695 9.8 CRITICAL
Network 		- - The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login a… CWE-287
Improper Authentication 		CVE-2020-36832 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311696 5.0 MEDIUM
Network 		- - The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on multiple user privilege/security functions provided in vers… CWE-284
Improper Access Control 		CVE-2020-36831 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311697 9.8 CRITICAL
Network 		- - The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and Local File Inclusion in versions up to, and including, 5.0.12 due to incorrect… CWE-862
 Missing Authorization 		CVE-2019-25217 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311698 7.2 HIGH
Network 		- - The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter in versions up to, and including, 1.7.4 due to insufficient input sanitization a… CWE-79
Cross-site Scripting 		CVE-2019-25216 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311699 7.3 HIGH
Network 		- - The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This make… CWE-862
 Missing Authorization 		CVE-2019-25215 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311700 7.2 HIGH
Network 		- - The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for … CWE-862
 Missing Authorization 		CVE-2019-25214 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm