Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2911 6.3 警告
Network 		WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7691 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
2912 6.3 警告
Network 		WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7692 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
2913 8 重要
Adjacent 		TP-LINK Technologies Archer AXE75 Firmware TP-LINK TechnologiesのArcher AXE75 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-15568 2026-05-8 12:09 2026-03-9 Show GitHub Exploit DB Packet Storm
2914 6.5 警告
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-31982 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
2915 4.6 警告
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック 		CVE-2025-31983 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
2916 6.1 警告
Network 		phppointofsale php point of sale phppointofsaleのphp point of saleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-41011 2026-05-8 12:09 2026-04-21 Show GitHub Exploit DB Packet Storm
2917 4.3 警告
Network 		フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-59809 2026-05-8 12:09 2026-04-14 Show GitHub Exploit DB Packet Storm
2918 5.4 警告
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のなりすましの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-20945 2026-05-8 12:09 2026-04-14 Show GitHub Exploit DB Packet Storm
2919 6.5 警告
Network 		フォーティネット FortiSOAR フォーティネットのFortiSOARにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-21742 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
2920 5.4 警告
Network 		フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-22154 2026-05-8 12:08 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313031 - - - A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv), formerly Cisco Firepower Threat … - CVE-2024-20260 2024-10-25 21:56 2024-10-24 Show GitHub Exploit DB Packet Storm
313032 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix dentry leak in cachefiles_open_file() A dentry leak may be caused when a lookup cookie and a cull are concurrent:… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-49870 2024-10-25 21:55 2024-10-22 Show GitHub Exploit DB Packet Storm
313033 6.4 MEDIUM
Network 		- - The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 0.9.5 due to insufficient input sanitization and output es… CWE-79
Cross-site Scripting 		CVE-2024-10343 2024-10-25 18:15 2024-10-25 Show GitHub Exploit DB Packet Storm
313034 6.4 MEDIUM
Network 		- - The Simple News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'news' shortcode in all versions up to, and including, 2.8 due to insufficient input sanitization an… CWE-79
Cross-site Scripting 		CVE-2024-10112 2024-10-25 18:15 2024-10-25 Show GitHub Exploit DB Packet Storm
313035 6.4 MEDIUM
Network 		- - The File Upload Types by WPForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.4.0 due to insufficient input sanitizat… CWE-79
Cross-site Scripting 		CVE-2024-10016 2024-10-25 18:15 2024-10-25 Show GitHub Exploit DB Packet Storm
313036 8.8 HIGH
Network 		- - The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.99.1. This is due to missing or incorrect nonce va… CWE-352
 Origin Validation Error 		CVE-2024-9598 2024-10-25 17:15 2024-10-25 Show GitHub Exploit DB Packet Storm
313037 - - - Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. - CVE-2024-50583 2024-10-25 16:15 2024-10-25 Show GitHub Exploit DB Packet Storm
313038 - - - Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserv… - CVE-2023-49233 2024-10-25 05:35 2024-09-4 Show GitHub Exploit DB Packet Storm
313039 8.8 HIGH
Network 		google chrome Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. (Chromium security severity: Medium) CWE-787
 Out-of-bounds Write 		CVE-2024-7973 2024-10-25 05:35 2024-08-22 Show GitHub Exploit DB Packet Storm
313040 - - - Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service via the libkemplink.so, isreverse library. - CVE-2023-29929 2024-10-25 05:35 2024-08-22 Show GitHub Exploit DB Packet Storm