Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2591 6.1 警告
Network 		Apache Software Foundation Apache Wicket Apache Software FoundationのApache Wicketにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42509 2026-05-8 12:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2592 4.3 警告
Network 		Jenkins プロジェクト Script Security JenkinsのScript Securityにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-42519 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2593 7.5 重要
Network 		Jenkins プロジェクト Credentials Binding JenkinsのCredentials Bindingにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-42520 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2594 6.5 警告
Network 		Jenkins プロジェクト Matrix Authorization Strategy JenkinsのMatrix Authorization Strategyにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-42521 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2595 4.3 警告
Network 		Jenkins プロジェクト GitHub Branch Source JenkinsのGitHub Branch Sourceにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-42522 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2596 7.5 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43057 2026-05-8 12:22 2026-05-1 Show GitHub Exploit DB Packet Storm
2597 9.3 緊急
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-43526 2026-05-8 12:22 2026-05-5 Show GitHub Exploit DB Packet Storm
2598 7.7 重要
Network 		OpenClaw OpenClaw OpenClawにおける複数の脆弱性 CWE-1188
CWE-918
CVE-2026-43527 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
2599 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける保存または転送前の重要な情報の削除に関する脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除 		CVE-2026-43528 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
2600 2.5 低
Local 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-43529 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312671 7.8 HIGH
Local 		thinkst opencanary OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the… CWE-863
 Incorrect Authorization 		CVE-2024-48911 2024-10-18 06:13 2024-10-15 Show GitHub Exploit DB Packet Storm
312672 8.8 HIGH
Network 		dueclic wp_2fa_with_telegram The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'v… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-9687 2024-10-18 06:11 2024-10-15 Show GitHub Exploit DB Packet Storm
312673 4.3 MEDIUM
Network 		elementor website_builder The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 3.23.5 via the get_image_alt funct… NVD-CWE-noinfo
CVE-2024-6757 2024-10-18 06:09 2024-10-15 Show GitHub Exploit DB Packet Storm
312674 7.8 HIGH
Local 		microsoft windows_server_2008
windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_10_1809
windows_server_2022
windows_10_1607
windows_server_2019 		Windows Common Log File System Driver Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-43501 2024-10-18 06:06 2024-10-9 Show GitHub Exploit DB Packet Storm
312675 5.3 MEDIUM
Network 		hcltech bigfix_platform A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances. CWE-427
 Uncontrolled Search Path Element 		CVE-2024-30117 2024-10-18 06:01 2024-10-15 Show GitHub Exploit DB Packet Storm
312676 5.5 MEDIUM
Local 		microsoft windows_server_2022_23h2
windows_11_22h2
windows_11_23h2
windows_11_24h2 		Windows Resilient File System (ReFS) Information Disclosure Vulnerability NVD-CWE-noinfo
CVE-2024-43500 2024-10-18 06:01 2024-10-9 Show GitHub Exploit DB Packet Storm
312677 4.9 MEDIUM
Network 		cert vince A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profi… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-9953 2024-10-18 05:59 2024-10-15 Show GitHub Exploit DB Packet Storm
312678 7.1 HIGH
Local 		microsoft windows_10_1809
windows_server_2019
windows_10_21h2
windows_10_22h2 		Windows Kernel Elevation of Privilege Vulnerability NVD-CWE-noinfo
CVE-2024-43502 2024-10-18 05:58 2024-10-9 Show GitHub Exploit DB Packet Storm
312679 5.4 MEDIUM
Network 		zaytech smart_online_order_for_clover The Smart Online Order for Clover plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's moo_receipt_link shortcode in all versions up to, and including, 1.5.7 due to insu… CWE-79
Cross-site Scripting 		CVE-2024-9895 2024-10-18 05:50 2024-10-15 Show GitHub Exploit DB Packet Storm
312680 6.1 MEDIUM
Network 		woocommerce woocommerce The WooCommerce plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 9.0.2. This is due to the plugin not properly neutralizing HTML elements from submitted orde… CWE-79
Cross-site Scripting 		CVE-2024-9944 2024-10-18 05:47 2024-10-15 Show GitHub Exploit DB Packet Storm