Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3091 7.8 重要
Local 		Tommaso Bona (ParzivalHack) PySpector Tommaso Bona (ParzivalHack)のPySpectorにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-41206 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3092 6.1 警告
Network 		cure53 DOMPurify cure53のDOMPurifyにおける複数の脆弱性 CWE-183
CWE-79
CVE-2026-41240 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3093 5.4 警告
Network 		pretalx pretalx pretalxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41241 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3094 8.1 重要
Network 		Project Contour Contour Project ContourのContourにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41246 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3095 9.8 緊急
Network 		std42 elfinder std42のelfinderにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-41247 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3096 7.5 重要
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける行動ワークフローに関する脆弱性 CWE-841
行動ワークフローの不適切な実施 		CVE-2026-41259 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3097 9.1 緊急
Network 		dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41327 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
3098 9.1 緊急
Network 		dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41328 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
3099 3.7 低
Network 		OpenClaw OpenClaw OpenClawにおけるインタラクション頻度の制御に関する脆弱性　 CWE-799
インタラクション頻度の不適切な制御 		CVE-2026-41333 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
3100 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける安全でない失敗処理に関する脆弱性 CWE-636
安全でない失敗処理 		CVE-2026-41334 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314581 6.1 MEDIUM
Network 		wpbeaverbuilder beaver_builder Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Reflected XSS.This issue affects Beaver Buil… CWE-79
Cross-site Scripting 		CVE-2024-43926 2024-09-4 00:15 2024-08-30 Show GitHub Exploit DB Packet Storm
314582 6.1 MEDIUM
Network 		webpack.js webpack Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset. Th… CWE-79
Cross-site Scripting 		CVE-2024-43788 2024-09-4 00:15 2024-08-28 Show GitHub Exploit DB Packet Storm
314583 5.9 MEDIUM
Network 		matter-labs zksolc zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if run with optimizations enabled. Here `~1` is generated as an unsigned 64 bits n… CWE-682
 Incorrect Calculation 		CVE-2024-45056 2024-09-4 00:14 2024-08-30 Show GitHub Exploit DB Packet Storm
314584 6.1 MEDIUM
Network 		collabora online Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) device variants of Collabora Online it was possible to inject JavaScript via url e… CWE-79
Cross-site Scripting 		CVE-2024-45045 2024-09-4 00:13 2024-08-30 Show GitHub Exploit DB Packet Storm
314585 - - - BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. (The packet data also lacks authentication and integrity protection.) - CVE-2024-34463 2024-09-4 00:12 2024-09-3 Show GitHub Exploit DB Packet Storm
314586 8.8 HIGH
Network 		muffingroup betheme The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via deserialization of untrusted input of the 'mfn-page-items' post meta value. This… CWE-502
 Deserialization of Untrusted Data 		CVE-2024-2694 2024-09-4 00:10 2024-08-30 Show GitHub Exploit DB Packet Storm
314587 5.4 MEDIUM
Network 		muffingroup betheme The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 27.5.6 due to insufficient input sanitization… CWE-79
Cross-site Scripting 		CVE-2024-3998 2024-09-4 00:00 2024-08-30 Show GitHub Exploit DB Packet Storm
314588 6.1 MEDIUM
Network 		elecom wrc-x3000gs2-b_firmware
wrc-x3000gs2-w_firmware
wrc-x3000gs2a-b_firmware 		Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, and WRC-X3000GS2A-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page whil… CWE-79
Cross-site Scripting 		CVE-2024-34577 2024-09-3 23:59 2024-08-30 Show GitHub Exploit DB Packet Storm
314589 5.4 MEDIUM
Network 		hubspot hubspot The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute of the HubSpot Meeting Widget in all version… CWE-79
Cross-site Scripting 		CVE-2024-5879 2024-09-3 23:59 2024-08-30 Show GitHub Exploit DB Packet Storm
314590 3.7 LOW
Network 		elecom wab-i1750-ps_firmware Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without … CWE-306
Missing Authentication for Critical Function 		CVE-2024-39300 2024-09-3 23:57 2024-08-30 Show GitHub Exploit DB Packet Storm