Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4051 7.3 重要
Network 		D-Link Systems, Inc. DIR-822 ファームウェア D-Link CorporationのDIR-822 ファームウェアにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7067 2026-05-1 10:41 2026-04-27 Show GitHub Exploit DB Packet Storm
4052 8.8 重要
Adjacent 		ディーリンクジャパン株式会社 dir-825 ファームウェア D-Link CorporationのDIR-825 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7068 2026-05-1 10:41 2026-04-27 Show GitHub Exploit DB Packet Storm
4053 8 重要
Adjacent 		ディーリンクジャパン株式会社 dir-825 ファームウェア D-Link CorporationのDIR-825 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7069 2026-05-1 10:41 2026-04-27 Show GitHub Exploit DB Packet Storm
4054 6.1 警告
Local 		Artifex Software MuPDF Artifex SoftwareのMuPDFにおける複数の脆弱性 CWE-119
CWE-125
CVE-2026-7233 2026-05-1 10:41 2026-04-28 Show GitHub Exploit DB Packet Storm
4055 7.2 重要
Network 		D-Link Systems, Inc. di-8100 ファームウェア D-Link Corporationのdi-8100 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7247 2026-05-1 10:41 2026-04-28 Show GitHub Exploit DB Packet Storm
4056 9.4 緊急
Network 		D-Link Systems, Inc. di-8100 ファームウェア D-Link Corporationのdi-8100 ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7248 2026-05-1 10:41 2026-04-28 Show GitHub Exploit DB Packet Storm
4057 8.8 重要
Network 		D-Link Systems, Inc. DIR-825M ファームウェア D-Link CorporationのDIR-825M ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7288 2026-05-1 10:41 2026-04-28 Show GitHub Exploit DB Packet Storm
4058 8.8 重要
Network 		D-Link Systems, Inc. DIR-825M ファームウェア D-Link CorporationのDIR-825M ファームウェアにおける複数の脆弱性 CWE-119
CWE-120
CVE-2026-7289 2026-05-1 10:41 2026-04-28 Show GitHub Exploit DB Packet Storm
4059 4.3 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-7340 2026-05-1 10:41 2026-04-28 Show GitHub Exploit DB Packet Storm
4060 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7341 2026-05-1 10:41 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314351 6.1 MEDIUM
Network 		basercms basercms baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue. CWE-79
Cross-site Scripting 		CVE-2024-46995 2024-10-29 00:33 2024-10-25 Show GitHub Exploit DB Packet Storm
314352 5.4 MEDIUM
Network 		basercms basercms baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue. CWE-79
Cross-site Scripting 		CVE-2024-46998 2024-10-29 00:32 2024-10-25 Show GitHub Exploit DB Packet Storm
314353 5.4 MEDIUM
Network 		basercms basercms baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue. CWE-79
Cross-site Scripting 		CVE-2024-46996 2024-10-29 00:31 2024-10-25 Show GitHub Exploit DB Packet Storm
314354 5.4 MEDIUM
Network 		basercms basercms baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue. CWE-79
Cross-site Scripting 		CVE-2024-46994 2024-10-29 00:30 2024-10-25 Show GitHub Exploit DB Packet Storm
314355 6.1 MEDIUM
Network 		openrefine openrefine OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the exception message and exception traceback with… CWE-79
Cross-site Scripting 		CVE-2024-47882 2024-10-28 23:26 2024-10-25 Show GitHub Exploit DB Packet Storm
314356 8.8 HIGH
Network 		openrefine openrefine OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the "enable_load_extension" property can be s… CWE-89
SQL Injection 		CVE-2024-47881 2024-10-28 23:14 2024-10-25 Show GitHub Exploit DB Packet Storm
314357 7.5 HIGH
Network 		google android there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interacti… CWE-476
 NULL Pointer Dereference 		CVE-2024-44101 2024-10-28 22:59 2024-10-25 Show GitHub Exploit DB Packet Storm
314358 - - - Validate.js provides a declarative way of validating javascript objects. All versions as of 30 November 2020 contain one or more regular expressions that are vulnerable to Regular Expression Denial o… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2020-26310 2024-10-28 22:58 2024-10-27 Show GitHub Exploit DB Packet Storm
314359 - - - Validate.js provides a declarative way of validating javascript objects. Versions 0.11.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service … CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2020-26309 2024-10-28 22:58 2024-10-27 Show GitHub Exploit DB Packet Storm
314360 - - - Validate.js provides a declarative way of validating javascript objects. Versions 0.13.1 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service … CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2020-26308 2024-10-28 22:58 2024-10-27 Show GitHub Exploit DB Packet Storm