Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3601 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8189 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
3602 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8190 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
3603 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8191 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
3604 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8192 2026-05-15 10:55 2026-05-9 Show GitHub Exploit DB Packet Storm
3605 6.5 警告
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける不適切に制御された順次メモリ割り当てに関する脆弱性 CWE-1325
不適切に制御された順次メモリ割り当て 		CVE-2026-8199 2026-05-15 10:55 2026-05-13 Show GitHub Exploit DB Packet Storm
3606 8.8 重要
Network 		MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-8201 2026-05-15 10:55 2026-05-13 Show GitHub Exploit DB Packet Storm
3607 7.5 重要
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8223 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
3608 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8227 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
3609 8.8 重要
Network 		WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8228 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
3610 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8249 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313101 6.1 MEDIUM
Network 		janeczku calibre-web A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The vulnerability occurs when editing book properties, such as uploading a cover o… CWE-79
Cross-site Scripting 		CVE-2021-3988 2024-11-20 00:43 2024-11-15 Show GitHub Exploit DB Packet Storm
313102 4.3 MEDIUM
Network 		viwis learning_management_system A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is… CWE-862
CWE-863
 Missing Authorization
 Incorrect Authorization 		CVE-2024-8001 2024-11-20 00:41 2024-11-13 Show GitHub Exploit DB Packet Storm
313103 7.4 HIGH
Network 		linuxfoundation harbor Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution … CWE-863
 Incorrect Authorization 		CVE-2022-31671 2024-11-20 00:40 2024-11-14 Show GitHub Exploit DB Packet Storm
313104 7.2 HIGH
Network 		mayurik best_employee_management_system A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulati… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-11214 2024-11-20 00:38 2024-11-15 Show GitHub Exploit DB Packet Storm
313105 9.8 CRITICAL
Network 		icdsoft multimanager_wp The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the user impersona… CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-11028 2024-11-20 00:38 2024-11-13 Show GitHub Exploit DB Packet Storm
313106 - - - In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which e… - CVE-2024-10103 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm
313107 - - - Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component. - CVE-2024-33231 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm
313108 - - - StepSecurity's Harden-Runner provides network egress filtering and runtime security for GitHub-hosted and self-hosted runners. Versions of step-security/harden-runner prior to v2.10.2 contain multipl… CWE-78
OS Command  		CVE-2024-52587 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm
313109 - - - AVSCMS v8.2.0 was discovered to contain weak default credentials for the Administrator account. - CVE-2024-51051 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm
313110 - - - An arbitrary file upload vulnerability in the component /main/fileupload.php of AVSCMS v8.2.0 allows attackers to execute arbitrary code via uploading a crafted file. - CVE-2024-51053 2024-11-20 00:35 2024-11-19 Show GitHub Exploit DB Packet Storm