Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4051 9.1 緊急
Network 		MIYAGAWA (Tatsuhiko Miyagawa) Plack::Middleware::Xsendfile MIYAGAWA (Tatsuhiko Miyagawa)のPlack::Middleware::Xsendfileにおける複数の脆弱性 CWE-200
CWE-441
CWE-913
CVE-2026-7381 2026-05-8 12:09 2026-04-29 Show GitHub Exploit DB Packet Storm
4052 8.1 重要
Network 		D-Link Systems, Inc. M60 Firmware D-Link CorporationのM60 Firmwareにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2026-7554 2026-05-8 12:09 2026-05-1 Show GitHub Exploit DB Packet Storm
4053 9.8 緊急
Network 		WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7690 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
4054 6.3 警告
Network 		WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7691 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
4055 6.3 警告
Network 		WAVLINK WL-WN570HA1 Firmware WAVLINKのWL-WN570HA1 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7692 2026-05-8 12:09 2026-05-3 Show GitHub Exploit DB Packet Storm
4056 8 重要
Adjacent 		TP-LINK Technologies Archer AXE75 Firmware TP-LINK TechnologiesのArcher AXE75 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-15568 2026-05-8 12:09 2026-03-9 Show GitHub Exploit DB Packet Storm
4057 6.5 警告
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-31982 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
4058 4.6 警告
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック 		CVE-2025-31983 2026-05-8 12:09 2026-05-6 Show GitHub Exploit DB Packet Storm
4059 6.1 警告
Network 		phppointofsale php point of sale phppointofsaleのphp point of saleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-41011 2026-05-8 12:09 2026-04-21 Show GitHub Exploit DB Packet Storm
4060 4.3 警告
Network 		フォーティネット FortiSOAR フォーティネットのFortiSOARにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-59809 2026-05-8 12:09 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313751 6.1 MEDIUM
Network 		- - The BBP Core – Expand bbPress powered forums with useful features plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on … - CVE-2024-9896 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313752 5.4 MEDIUM
Network 		- - The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget '… CWE-79
Cross-site Scripting 		CVE-2024-9868 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313753 6.1 MEDIUM
Network 		- - The ReCaptcha Integration for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up… CWE-79
Cross-site Scripting 		CVE-2024-8739 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313754 5.3 MEDIUM
Network 		- - The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'service' parameter of the bookingpress_form shortcode in all … CWE-89
SQL Injection 		CVE-2024-10540 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313755 6.4 MEDIUM
Network 		- - The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Gallery Wi… CWE-79
Cross-site Scripting 		CVE-2024-10310 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313756 - - - The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 an… - CVE-2024-44234 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313757 - - - The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 an… - CVE-2024-44233 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313758 - - - The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 an… - CVE-2024-44232 2024-11-4 10:35 2024-11-2 Show GitHub Exploit DB Packet Storm
313759 6.5 MEDIUM
Network 		lunary lunary An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' p… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-7473 2024-11-4 02:15 2024-10-29 Show GitHub Exploit DB Packet Storm
313760 7.1 HIGH
Network 		lollms lollms_web_ui A vulnerability in parisneo/lollms-webui version 9.8 allows for a Denial of Service (DOS) attack when uploading an audio file. If an attacker appends a large number of characters to the end of a mult… CWE-352
 Origin Validation Error 		CVE-2024-6959 2024-11-4 02:15 2024-10-13 Show GitHub Exploit DB Packet Storm