Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2351 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-7337 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2352 7.5 重要
Adjacent 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7338 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2353 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-7339 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2354 8.1 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-7346 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2355 8.1 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7347 2026-05-7 12:27 2026-04-28 Show GitHub Exploit DB Packet Storm
2356 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7348 2026-05-7 12:27 2026-04-28 Show GitHub Exploit DB Packet Storm
2357 6.3 警告
Network 		Shenzhen Tenda Technology Co.,Ltd. 4g300 ファームウェア Shenzhen Tenda Technology Co.,Ltd.の4g300 ファームウェアにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7469 2026-05-7 12:27 2026-04-30 Show GitHub Exploit DB Packet Storm
2358 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. 4g300 ファームウェア Shenzhen Tenda Technology Co.,Ltd.の4g300 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7470 2026-05-7 12:27 2026-04-30 Show GitHub Exploit DB Packet Storm
2359 7 重要
Local 		NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-20
CWE-502
CWE-502
CVE-2026-5473 2026-05-7 12:27 2026-04-3 Show GitHub Exploit DB Packet Storm
2360 8.8 重要
Adjacent 		NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-119
CWE-122
CVE-2026-5474 2026-05-7 12:27 2026-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313081 8.8 HIGH
Network 		acymailing acymailing The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7384 2024-09-27 22:15 2024-08-22 Show GitHub Exploit DB Packet Storm
313082 8.8 HIGH
Network 		wpmarketingrobot woocommerce_google_feed_manager The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wppfm_removeFeedFile' function in all versions up to, and… CWE-862
 Missing Authorization 		CVE-2024-7258 2024-09-27 22:05 2024-08-23 Show GitHub Exploit DB Packet Storm
313083 4.3 MEDIUM
Network 		webba-booking webba_booking The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_appearance() func… CWE-862
 Missing Authorization 		CVE-2024-8432 2024-09-27 21:58 2024-09-24 Show GitHub Exploit DB Packet Storm
313084 6.1 MEDIUM
Network 		fatcatapps pixel_cat The Pixel Cat – Conversion Pixel Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions u… CWE-79
Cross-site Scripting 		CVE-2024-8544 2024-09-27 21:57 2024-09-24 Show GitHub Exploit DB Packet Storm
313085 5.4 MEDIUM
Network 		ggnome garden_gnome_package The Garden Gnome Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ggpkg shortcode in all versions up to, and including, 2.2.9 due to insufficient input sanit… CWE-79
Cross-site Scripting 		CVE-2024-8657 2024-09-27 21:56 2024-09-24 Show GitHub Exploit DB Packet Storm
313086 6.1 MEDIUM
Network 		ibericode koko_analytics The Koko Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1… CWE-79
Cross-site Scripting 		CVE-2024-8662 2024-09-27 21:54 2024-09-24 Show GitHub Exploit DB Packet Storm
313087 7.2 HIGH
Network 		presstigers simple_job_board The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.12.3 via deserialization of untrusted input when editing job applications. This… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-7351 2024-09-27 21:48 2024-08-24 Show GitHub Exploit DB Packet Storm
313088 7.2 HIGH
Network 		benjaminrojas wp_editor The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authen… CWE-502
 Deserialization of Untrusted Data 		CVE-2022-2446 2024-09-27 10:09 2024-09-14 Show GitHub Exploit DB Packet Storm
313089 5.4 MEDIUM
Network 		arnoldgoodway neighborly The Neighborly theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 1.4 due to insufficie… CWE-79
Cross-site Scripting 		CVE-2024-5869 2024-09-27 10:06 2024-09-14 Show GitHub Exploit DB Packet Storm
313090 5.4 MEDIUM
Network 		samiahmedsiddiqui custom_permalinks The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping on tag names… CWE-79
Cross-site Scripting 		CVE-2023-0926 2024-09-27 10:01 2024-08-24 Show GitHub Exploit DB Packet Storm