Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
371	6.1	警告 Network	Apache Software Foundation	Echarts	Apache Software FoundationのEchartsにおけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-45249	2026-06-3 15:38	2026-05-25	Show	GitHub Exploit DB Packet Storm

372	5.5	警告 Local	Libusb	Libusb	Libusbにおける境界外読み取りに関する脆弱性 New	CWE-125 境界外読み取り	CVE-2026-47104	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

373	7.8	重要 Local	レッドハット openSUSE	Red Hat Hardened Images Red Hat Satellite Red Hat Update Infrastructure Red Hat OpenShift Container Platform libsolv Red&nbs…	openSUSE等の複数ベンダの製品における境界外書き込みに関する脆弱性 New	CWE-787 境界外書き込み	CVE-2026-48864	2026-06-3 15:38	2026-05-26	Show	GitHub Exploit DB Packet Storm

374	7.5	重要 Network	Jenkins プロジェクト	Pipeline: Groovy Libraries	JenkinsのPipeline: Groovy Librariesにおけるリンク解釈に関する脆弱性 New	CWE-59 リンク解釈の問題	CVE-2026-48921	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

375	4.3	警告 Network	Kostyasha	Github Integration	KostyashaのGithub Integrationにおけるクロスサイトリクエストフォージェリの脆弱性 New	CWE-352 同一生成元ポリシー違反	CVE-2026-48925	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

376	5.5	警告 Network	Jenkins プロジェクト	buildgraph-view	Jenkinsのbuildgraph-viewにおけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-48927	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

377	6.5	警告 Network	IBM	IBM i	IBMのIBM Iにおける再帰制御に関する脆弱性 New	CWE-674 不適切な再帰制御	CVE-2026-6936	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

378	2.7	低 Network	Synology Inc.	Surveillance Station	Synology Inc.のSurveillance Stationにおけるパストラバーサルの脆弱性 New	CWE-22 パス・トラバーサル	CVE-2024-47267	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

379	4.9	警告 Network	Synology Inc.	Surveillance Station	Synology Inc.のSurveillance Stationにおける認証の欠如に関する脆弱性 New	CWE-862 認証の欠如	CVE-2024-47268	2026-06-3 15:38	2026-05-27	Show	GitHub Exploit DB Packet Storm

380	4.9	警告 Network	Synology Inc.	Surveillance Station	Synology Inc.のSurveillance Stationにおける重要な情報の平文での送信に関する脆弱性 New	CWE-319 重要な情報の平文での送信	CVE-2024-47269	2026-06-3 15:37	2026-05-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319211	6.1	MEDIUM Network	nextbricks	bricksore	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nextbricks Brickscore allows Stored XSS.This issue affects Brickscore: from n/a through 1.…	CWE-79 Cross-site Scripting	CVE-2024-43950	2024-08-31 01:20	2024-08-30	Show	GitHub Exploit DB Packet Storm

319212	7.5	HIGH Network	frrouting redhat	frrouting enterprise_linux	An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.	NVD-CWE-noinfo	CVE-2024-44070	2024-08-31 01:19	2024-08-19	Show	GitHub Exploit DB Packet Storm

319213	5.4	MEDIUM Network	cryoutcreations	tempera	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8…	CWE-79 Cross-site Scripting	CVE-2024-43951	2024-08-31 01:17	2024-08-30	Show	GitHub Exploit DB Packet Storm

319214	5.4	MEDIUM Network	cryoutcreations	esotera	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2…	CWE-79 Cross-site Scripting	CVE-2024-43952	2024-08-31 01:16	2024-08-30	Show	GitHub Exploit DB Packet Storm

319215	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-8064	2024-08-31 01:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319216	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-7712	2024-08-31 01:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319217	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2024-7051	2024-08-31 01:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319218	6.1	MEDIUM Network	gianniporto	intothedark	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gianni Porto IntoTheDark allows Reflected XSS.This issue affects IntoTheDark: from n/a thr…	CWE-79 Cross-site Scripting	CVE-2024-43958	2024-08-31 01:15	2024-08-30	Show	GitHub Exploit DB Packet Storm

319219	6.5	MEDIUM Network	stitionai	devika	stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read (LFI) by Prompt Injection. The integration of Google Gimini 1.0 Pro with `HarmBlock…	CWE-74 Injection	CVE-2024-6331	2024-08-31 01:15	2024-08-4	Show	GitHub Exploit DB Packet Storm

319220	4.8	MEDIUM Network	pagebuilderaddons	web_and_woocommerce_addons_for_wpbakery_builder	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Page Builder Addons Web and WooCommerce Addons for WPBakery Builder allows Stored XSS.This…	CWE-79 Cross-site Scripting	CVE-2024-43960	2024-08-31 01:12	2024-08-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed