Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3031 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5989 2026-05-1 10:43 2026-04-10 Show GitHub Exploit DB Packet Storm
3032 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5990 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3033 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5991 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3034 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. F451 Firmware Shenzhen Tenda Technology Co.,Ltd.のF451 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5992 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3035 8.1 重要
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-6011 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3036 8.8 重要
Network 		D-Link Systems, Inc. DIR-513 ファームウェア D-Link CorporationのDIR-513 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6012 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3037 8.8 重要
Network 		D-Link Systems, Inc. DIR-513 ファームウェア D-Link CorporationのDIR-513 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6013 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3038 8.8 重要
Network 		D-Link Systems, Inc. DIR-513 ファームウェア D-Link CorporationのDIR-513 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-6014 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3039 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC9 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC9 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6015 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
3040 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. AC9 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC9 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-6016 2026-05-1 10:42 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317011 - - - mmudb v1.9.3 was discovered to use the HTTP protocol in the ShowMetricsRaw and ShowMetricsAsText functions, possibly allowing attackers to intercept communications via a man-in-the-middle attack. - CVE-2024-41262 2024-08-2 01:35 2024-08-1 Show GitHub Exploit DB Packet Storm
317012 - - - filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init function of index.go. - CVE-2024-41255 2024-08-2 00:35 2024-08-1 Show GitHub Exploit DB Packet Storm
317013 - - - The SpiderContacts WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used again… - CVE-2024-6272 2024-08-2 00:35 2024-07-31 Show GitHub Exploit DB Packet Storm
317014 6.4 MEDIUM
Network 		- - The Element Pack - Addon for Elementor Page Builder WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget wrapper link URL in all versions up to, and inclu… - CVE-2024-2455 2024-08-1 23:04 2024-08-1 Show GitHub Exploit DB Packet Storm
317015 - - - it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized actions. This is due to improper logic flow on the user re… - CVE-2024-6695 2024-08-1 23:00 2024-07-31 Show GitHub Exploit DB Packet Storm
317016 - - - The Slider by 10Web WordPress plugin before 1.2.57 does not sanitise and escape its Slider Title, which could allow high privilege users such as editors and above to perform Cross-Site Scripting att… - CVE-2024-6408 2024-08-1 23:00 2024-07-31 Show GitHub Exploit DB Packet Storm
317017 - - - The WANotifier WordPress plugin before 2.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks ev… - CVE-2024-6165 2024-08-1 23:00 2024-07-31 Show GitHub Exploit DB Packet Storm
317018 - - - os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp secti… - CVE-2024-42381 2024-08-1 22:59 2024-07-31 Show GitHub Exploit DB Packet Storm
317019 - - - goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component. - CVE-2024-41253 2024-08-1 22:58 2024-08-1 Show GitHub Exploit DB Packet Storm
317020 9.8 CRITICAL
Network 		apple
canonical 		cups
ubuntu_linux 		CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2004-2154 2024-08-1 22:41 2004-12-31 Show GitHub Exploit DB Packet Storm