Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3751	7	重要 Local	VMware	Spring Boot	VMwareのSpring Bootにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40973	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

3752	7.5	重要 Network	VMware	Spring Boot	VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2026-40975	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

3753	9.1	緊急 Network	VMware	Spring Boot	VMwareのSpring Bootにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-40976	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

3754	6.7	警告 Local	VMware	Spring Boot	VMwareのSpring Bootにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-40977	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

3755	8.8	重要 Network	VMware	Spring AI	VMwareのSpring AIにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-40978	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

3756	6.1	警告 Local	VMware	Spring AI	VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性	CWE-377 安全でない一時ファイル	CVE-2026-40979	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

3757	6.5	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40980	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

3758	5.3	警告 Local	OpenClaw	OpenClaw	OpenClawにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-41332	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

3759	4.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-41339	2026-05-1 10:47	2026-04-23	Show	GitHub Exploit DB Packet Storm

3760	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41374	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313791	8.1	HIGH Network	google	chrome	Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High)	NVD-CWE-noinfo	CVE-2024-10229	2024-10-26 02:04	2024-10-23	Show	GitHub Exploit DB Packet Storm

313792	9.8	CRITICAL Network	keith-cullen	freecoap	Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a s…	CWE-476 NULL Pointer Dereference	CVE-2024-40493	2024-10-26 02:01	2024-10-23	Show	GitHub Exploit DB Packet Storm

313793	8.8	HIGH Network	google	chrome	Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)	CWE-843 Type Confusion	CVE-2024-10231	2024-10-26 02:01	2024-10-23	Show	GitHub Exploit DB Packet Storm

313794	9.8	CRITICAL Network	janobe	online_complaint_site	SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component.	CWE-89 SQL Injection	CVE-2024-44812	2024-10-26 01:56	2024-10-23	Show	GitHub Exploit DB Packet Storm

313795	5.0	MEDIUM Local	loan_management_system_project	loan_management_system	itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in …	CWE-79 Cross-site Scripting	CVE-2024-48415	2024-10-26 01:55	2024-10-23	Show	GitHub Exploit DB Packet Storm

313796	9.8	CRITICAL Network	properfraction	profilepress	The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.11.1. This is due to insufficient verification on the user being returned by t…	CWE-287 Improper Authentication	CVE-2024-9947	2024-10-26 01:53	2024-10-23	Show	GitHub Exploit DB Packet Storm

313797	4.8	MEDIUM Network	tuzitio	camaleon_cms	Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field.	CWE-79 Cross-site Scripting	CVE-2024-48652	2024-10-26 01:51	2024-10-23	Show	GitHub Exploit DB Packet Storm

313798	5.4	MEDIUM Network	getshortcodes	shortcodes_ultimate	The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in all versions up to, and including, 7.2.2 due to insuffic…	CWE-79 Cross-site Scripting	CVE-2024-8500	2024-10-26 01:43	2024-10-23	Show	GitHub Exploit DB Packet Storm

313799	6.1	MEDIUM Network	steelthemes	nioland	The Nioland theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s’ parameter in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output esc…	CWE-79 Cross-site Scripting	CVE-2024-10250	2024-10-26 01:37	2024-10-23	Show	GitHub Exploit DB Packet Storm

313800	-		-	-	Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file.	-	CVE-2024-48540	2024-10-26 01:35	2024-10-25	Show	GitHub Exploit DB Packet Storm