Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3401	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31484	2026-04-30 12:16	2026-04-22	Show	GitHub Exploit DB Packet Storm

3402	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31485	2026-04-30 12:16	2026-04-22	Show	GitHub Exploit DB Packet Storm

3403	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31486	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3404	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31487	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3405	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31488	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3406	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31489	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3407	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31490	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3408	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-31491	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3409	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-31492	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

3410	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31493	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
551	4.3	MEDIUM Network	-	-	The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'rybb_a…	CWE-352 Origin Validation Error	CVE-2026-8424	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

552	4.3	MEDIUM Network	-	-	The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4. This is due to the plugin not properly verifying that a user…	CWE-862 Missing Authorization	CVE-2026-8610	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

553	5.3	MEDIUM Network	-	-	The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_content_editor function in all versio…	CWE-862 Missing Authorization	CVE-2025-15369	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

554	6.1	MEDIUM Network	-	-	The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.97.1 due to insufficient input san…	CWE-79 Cross-site Scripting	CVE-2026-8624	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

555	6.1	MEDIUM Network	-	-	The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to insufficient input sanitization and output…	CWE-79 Cross-site Scripting	CVE-2026-8626	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

556	6.1	MEDIUM Network	-	-	The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0. This is due to the correct_prices_pa…	CWE-79 Cross-site Scripting	CVE-2026-8627	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

557	6.5	MEDIUM Network	-	-	The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versions up to, and including, 2.15.16. This is due to insufficient escaping on…	CWE-89 SQL Injection	CVE-2026-8685	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

558	7.5	HIGH Network	-	-	The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and 'user_name' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the u…	CWE-89 SQL Injection	CVE-2026-9010	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

559	4.3	MEDIUM Network	-	-	The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized script data in versions up to, and including, 4.9.7 due to sensitive internal o…	CWE-200 Information Exposure	CVE-2026-5075	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm

560	9.8	CRITICAL Network	-	-	The Boost plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.0.3 via deserialization of untrusted input in the STYXKEY-BOOST_USER_LOCATION cookie. This mak…	CWE-502 Deserialization of Untrusted Data	CVE-2026-7637	2026-05-20 22:54	2026-05-20	Show	GitHub Exploit DB Packet Storm