Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3311 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-43896 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
3312 8.1 重要
Network 		Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-43913 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
3313 9.8 緊急
Network 		Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-43914 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
3314 8.1 重要
Network 		Pocket ID Pocket ID Pocket IDにおける複数の脆弱性 CWE-285
CWE-613
CVE-2026-43983 2026-05-15 10:58 2026-05-12 Show GitHub Exploit DB Packet Storm
3315 7.5 重要
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-44289 2026-05-15 10:58 2026-05-13 Show GitHub Exploit DB Packet Storm
3316 7.5 重要
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) 		CVE-2026-44290 2026-05-15 10:58 2026-05-13 Show GitHub Exploit DB Packet Storm
3317 8.1 重要
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-44291 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3318 5.3 警告
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染) 		CVE-2026-44292 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3319 8.8 重要
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-44293 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3320 5.3 警告
Network 		protobufjs project protobufjs protobufjs projectのprotobufjsにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-44294 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312501 4.3 MEDIUM
Network 		janeczku calibre-web An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without public shelf permissions to create public shelves. The vulnerability is due to the `… CWE-862
 Missing Authorization 		CVE-2021-3987 2024-11-20 00:44 2024-11-15 Show GitHub Exploit DB Packet Storm
312502 6.1 MEDIUM
Network 		janeczku calibre-web A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The vulnerability occurs when editing book properties, such as uploading a cover o… CWE-79
Cross-site Scripting 		CVE-2021-3988 2024-11-20 00:43 2024-11-15 Show GitHub Exploit DB Packet Storm
312503 4.3 MEDIUM
Network 		viwis learning_management_system A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is… CWE-862
CWE-863
 Missing Authorization
 Incorrect Authorization 		CVE-2024-8001 2024-11-20 00:41 2024-11-13 Show GitHub Exploit DB Packet Storm
312504 7.4 HIGH
Network 		linuxfoundation harbor Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution … CWE-863
 Incorrect Authorization 		CVE-2022-31671 2024-11-20 00:40 2024-11-14 Show GitHub Exploit DB Packet Storm
312505 7.2 HIGH
Network 		mayurik best_employee_management_system A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulati… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-11214 2024-11-20 00:38 2024-11-15 Show GitHub Exploit DB Packet Storm
312506 9.8 CRITICAL
Network 		icdsoft multimanager_wp The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersona… CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-11028 2024-11-20 00:38 2024-11-13 Show GitHub Exploit DB Packet Storm
312507 - - - In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which e… - CVE-2024-10103 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm
312508 - - - Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component. - CVE-2024-33231 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm
312509 - - - StepSecurity's Harden-Runner provides network egress filtering and runtime security for GitHub-hosted and self-hosted runners. Versions of step-security/harden-runner prior to v2.10.2 contain multipl… CWE-78
OS Command  		CVE-2024-52587 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm
312510 - - - AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account. - CVE-2024-51051 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm