Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3641	4.4	警告 Local	notepad-plus-plus	notepad++	notepad-plus-plusのnotepad++における書式文字列に関する脆弱性	CWE-134 書式文字列の問題	CVE-2026-6539	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3642	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6867	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3643	7.5	重要 Network	Wireshark	Wireshark	Wiresharkにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6868	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3644	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6869	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3645	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける初期化されていないポインタのアクセスに関する脆弱性	CWE-824 初期化されていないポインタのアクセス	CVE-2026-6870	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

3646	5.6	警告 Network	ollama	ollama	Ollamaにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-7020	2026-05-7 12:02	2026-04-26	Show	GitHub Exploit DB Packet Storm

3647	5.6	警告 Network	vLLM	vLLM	vLLMにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-7141	2026-05-7 12:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3648	7.5	重要 Network	FreeBSD	FreeBSD	FreeBSDにおける複数の脆弱性	CWE-674 CWE-791	CVE-2026-7164	2026-05-7 12:01	2026-04-30	Show	GitHub Exploit DB Packet Storm

3649	7.8	重要 Local	FreeBSD	FreeBSD	FreeBSDにおける演算子の優先順位についての論理エラーに関する脆弱性	CWE-783 演算子の優先順位についての論理エラー	CVE-2026-7270	2026-05-7 12:01	2026-04-30	Show	GitHub Exploit DB Packet Storm

3650	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-7320	2026-05-7 12:01	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1101	4.4	MEDIUM Network	-	-	The Passeum Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.0. This is due to the `get_shop_url()` method returning the `shop_name`…	CWE-79 Cross-site Scripting	CVE-2026-7421	2026-06-4 22:53	2026-06-3	Show	GitHub Exploit DB Packet Storm

1102	4.3	MEDIUM Network	-	-	The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing or incorr…	CWE-352 Origin Validation Error	CVE-2026-9732	2026-06-4 22:53	2026-06-3	Show	GitHub Exploit DB Packet Storm

1103	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8.	CWE-79 Cross-site Scripting	CVE-2025-15654	2026-06-4 22:53	2026-06-3	Show	GitHub Exploit DB Packet Storm

1104	7.6	HIGH Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a …	CWE-89 SQL Injection	CVE-2025-15655	2026-06-4 22:53	2026-06-3	Show	GitHub Exploit DB Packet Storm

1105	8.8	HIGH Network	-	-	Incorrect Privilege Assignment vulnerability in Mojoomla School Management allows Privilege Escalation. This issue affects School Management: from n/a through 93.2.0.	CWE-266 Incorrect Privilege Assignment	CVE-2025-15656	2026-06-4 22:53	2026-06-3	Show	GitHub Exploit DB Packet Storm

1106	6.5	MEDIUM Network	-	-	The MasterStudy LMS Pro Plus plugin for WordPress is vulnerable to generic SQL Injection via the 'columns' parameter in all versions up to, and including, 4.8.20 due to insufficient escaping on the u…	CWE-89 SQL Injection	CVE-2026-8653	2026-06-4 22:53	2026-06-4	Show	GitHub Exploit DB Packet Storm

1107	7.5	HIGH Network	-	-	The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all versions up to, and including, 4.71. Thi…	CWE-862 Missing Authorization	CVE-2026-10737	2026-06-4 22:53	2026-06-4	Show	GitHub Exploit DB Packet Storm

1108	7.6	HIGH Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection. This issue affects Photo Gallery by 10W…	CWE-89 SQL Injection	CVE-2026-49771	2026-06-4 22:53	2026-06-4	Show	GitHub Exploit DB Packet Storm

1109	5.3	MEDIUM Network	-	-	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tips and Tricks HQ WP eMember allows Retrieve Embedded Sensitive Data. This issue affects WP eMember: from…	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-49077	2026-06-4 22:53	2026-06-4	Show	GitHub Exploit DB Packet Storm

1110	8.8	HIGH Network	oracle	e-business_suite	Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability all…	CWE-269 Improper Privilege Management	CVE-2026-46837	2026-06-4 22:46	2026-05-29	Show	GitHub Exploit DB Packet Storm