Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2511	7.5	重要 Network	Google	Android	GoogleのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71253	2026-05-12 10:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

2512	7.5	重要 Network	Google	Android	GoogleのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71254	2026-05-12 10:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

2513	7.5	重要 Network	Google	Android	GoogleのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71255	2026-05-12 10:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

2514	7.5	重要 Network	Google	Android	GoogleのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71256	2026-05-12 10:20	2026-05-6	Show	GitHub Exploit DB Packet Storm

2515	8.8	重要 Network	CERN	Rucio	CERNのRucioにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-29080	2026-05-12 10:20	2026-05-6	Show	GitHub Exploit DB Packet Storm

2516	8.8	重要 Network	CERN	Rucio	CERNのRucioにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-29090	2026-05-12 10:20	2026-05-6	Show	GitHub Exploit DB Packet Storm

2517	7.1	重要 Network	vLLM	vLLM	vLLMにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-34760	2026-05-12 10:20	2026-04-2	Show	GitHub Exploit DB Packet Storm

2518	8.8	重要 Network	OpenMRS	OpenMRS	OpenMRSにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40076	2026-05-12 10:20	2026-05-6	Show	GitHub Exploit DB Packet Storm

2519	9.1	緊急 Network	TheCodingMachine	Gotenberg	TheCodingMachineのGotenbergにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-40281	2026-05-12 10:20	2026-05-6	Show	GitHub Exploit DB Packet Storm

2520	5.4	警告 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-40296	2026-05-12 10:20	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318661	9.8	CRITICAL Network	feehi	feehicms	A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument Use…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2024-8296	2024-08-31 00:36	2024-08-29	Show	GitHub Exploit DB Packet Storm

318662	7.8	HIGH Local	aertherwide	exiftags	Buffer Overflow vulnerability in open source exiftags v.1.01 allows a local attacker to execute arbitrary code via the paresetag function.	CWE-787 Out-of-bounds Write	CVE-2024-42851	2024-08-31 00:30	2024-08-28	Show	GitHub Exploit DB Packet Storm

318663	7.5	HIGH Network	kitsada8621	digital_library_management_system	A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwt_refresh_token…	CWE-116 Improper Encoding or Escaping of Output	CVE-2024-8297	2024-08-31 00:28	2024-08-29	Show	GitHub Exploit DB Packet Storm

318664	9.8	CRITICAL Network	gitapp	dingfanzu	A vulnerability was found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /aj…	CWE-89 SQL Injection	CVE-2024-8301	2024-08-31 00:24	2024-08-29	Show	GitHub Exploit DB Packet Storm

318665	4.8	MEDIUM Adjacent	teldat	rs123_firmware rs123w_firmware	Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.php page.	CWE-79 Cross-site Scripting	CVE-2022-39996	2024-08-31 00:17	2024-08-28	Show	GitHub Exploit DB Packet Storm

318666	4.3	MEDIUM Network	smashballoon	reviews_feed	The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i…	CWE-352 Origin Validation Error	CVE-2024-8200	2024-08-31 00:08	2024-08-28	Show	GitHub Exploit DB Packet Storm

318667	4.3	MEDIUM Network	smashballoon	reviews_feed	The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa…	CWE-862 Missing Authorization	CVE-2024-8199	2024-08-31 00:04	2024-08-28	Show	GitHub Exploit DB Packet Storm

318668	8.8	HIGH Network	skyss	arfa-cms	A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.	CWE-352 Origin Validation Error	CVE-2024-45264	2024-08-31 00:02	2024-08-28	Show	GitHub Exploit DB Packet Storm

318669	9.8	CRITICAL Network	dlink	dir-846w_firmware	D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the wl(0).(0)_ssid parameter. This vulnerability is exploited via a crafted POST request.	CWE-78 OS Command	CVE-2024-44342	2024-08-30 23:57	2024-08-28	Show	GitHub Exploit DB Packet Storm

318670	9.8	CRITICAL Network	dlink	dir-846w_firmware	D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST requ…	CWE-78 OS Command	CVE-2024-44341	2024-08-30 23:57	2024-08-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed