Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3011 8.8 重要
Network 		HKUDS OpenHarness HKUDSのOpenHarnessにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-7551 2026-05-7 11:25 2026-04-30 Show GitHub Exploit DB Packet Storm
3012 9.8 緊急
Network 		Synway SMG Gateway Management Software SynwayのSMG Gateway Management SoftwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-71284 2026-05-7 10:53 2026-04-30 Show GitHub Exploit DB Packet Storm
3013 7.8 重要
Local 		KDE project KCoreAddons KDE projectのKCoreAddonsにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化 		CVE-2026-41526 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
3014 8.8 重要
Network 		SailPoint Technologies Holdings, Inc. IdentityIQ SailPoint Technologies Holdings, Inc.のIdentityIQにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-5712 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3015 5.5 警告
Local 		Canonical pdfunite Canonicalのpdfuniteにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2018-25306 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3016 9.8 緊急
Network 		Kvcache-ai Ktransformers Kvcache-aiのKtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-26210 2026-05-7 10:53 2026-04-23 Show GitHub Exploit DB Packet Storm
3017 7.1 重要
Local 		デル Dell/Alienware Purchased Apps デルのDell/Alienware Purchased Appsにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-27105 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3018 7.8 重要
Local 		entechtaiwan TViPort entechtaiwanのTViPortにおける複数の脆弱性 CWE-20
CWE-269
CVE-2026-30769 2026-05-7 10:53 2026-04-29 Show GitHub Exploit DB Packet Storm
3019 5.9 警告
Network 		Elasticsearch B.V. Elastic Package Registry Elasticsearch B.V.のElastic Package Registryにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-33467 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
3020 4.4 警告
Local 		Mercurycom MIPC252W Firmware MercurycomのMIPC252W Firmwareにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-35901 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316911 - - - Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00. - CVE-2024-5828 2024-08-6 12:15 2024-08-6 Show GitHub Exploit DB Packet Storm
316912 7.2 HIGH
Network 		- - The Traffic Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in the 'UserWebStat' AJAX function in all versions up to, and including, 1.4.5 due to in… - CVE-2024-7485 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
316913 7.2 HIGH
Network 		- - The CRM Perks Forms plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'handle_uploaded_files' function in versions up to, and including, 1.1.3. T… - CVE-2024-7484 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
316914 8.8 HIGH
Network 		- - The Blox Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleUploadFile' function in all versions up to, and including, 1.0.65.… - CVE-2024-6315 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
316915 8.8 HIGH
Network 		- - The Horizontal scrolling announcements plugin for WordPress is vulnerable to SQL Injection via the plugin's 'hsas-shortcode' shortcode in versions up to, and including, 2.4 due to insufficient escapi… - CVE-2023-5000 2024-08-6 11:15 2024-08-6 Show GitHub Exploit DB Packet Storm
316916 - - - The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high privilege users such as contributor to perform… - CVE-2024-6390 2024-08-5 23:35 2024-08-3 Show GitHub Exploit DB Packet Storm
316917 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-6865 2024-08-5 23:15 2024-08-5 Show GitHub Exploit DB Packet Storm
316918 - - - A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part of the file view_company.php. The manipulation of the argum… CWE-89
SQL Injection 		CVE-2024-7452 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm
316919 - - - A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file apply_now.php. The manipulation … CWE-89
SQL Injection 		CVE-2024-7451 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm
316920 - - - A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resume_upload.php of… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7450 2024-08-5 21:41 2024-08-4 Show GitHub Exploit DB Packet Storm