Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4161 6.3 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-7971 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4162 4.3 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける初期化されていない変数の使用に関する脆弱性 CWE-457
初期化されていない変数の使用 		CVE-2026-7972 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4163 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-7973 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4164 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7974 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4165 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7975 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4166 7.5 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7976 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4167 6.3 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-7977 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4168 8.1 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-7978 2026-05-8 12:16 2026-05-6 Show GitHub Exploit DB Packet Storm
4169 4.3 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-7979 2026-05-8 12:15 2026-05-6 Show GitHub Exploit DB Packet Storm
4170 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7980 2026-05-8 12:15 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313771 9.8 CRITICAL
Network 		contest-gallery contest_gallery The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection … CWE-89
SQL Injection 		CVE-2024-10687 2024-11-9 00:26 2024-11-5 Show GitHub Exploit DB Packet Storm
313772 4.3 MEDIUM
Network 		wpxpro xpro_addons_for_elementor The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the render function in widgets… NVD-CWE-noinfo
CVE-2024-10319 2024-11-9 00:25 2024-11-5 Show GitHub Exploit DB Packet Storm
313773 4.8 MEDIUM
Network 		10web photo_gallery The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.30 due to ins… CWE-79
Cross-site Scripting 		CVE-2024-9878 2024-11-9 00:25 2024-11-5 Show GitHub Exploit DB Packet Storm
313774 8.8 HIGH
Network 		fileorganizer fileorganizer The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-7985 2024-11-9 00:22 2024-10-30 Show GitHub Exploit DB Packet Storm
313775 9.8 CRITICAL
Network 		63moons aero
wave_2.0 		This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conduc… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-51558 2024-11-9 00:19 2024-11-4 Show GitHub Exploit DB Packet Storm
313776 6.5 MEDIUM
Network 		63moons aero
wave_2.0 		This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP re… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-51557 2024-11-9 00:19 2024-11-4 Show GitHub Exploit DB Packet Storm
313777 7.5 HIGH
Network 		ruijie nbr3000d-e_firmware An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/shell/postgresql.conf component. NVD-CWE-noinfo
CVE-2024-48783 2024-11-9 00:19 2024-10-16 Show GitHub Exploit DB Packet Storm
313778 4.3 MEDIUM
Network 		63moons aero
wave_2.0 		This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing… CWE-209
Information Exposure Through an Error Message 		CVE-2024-51560 2024-11-9 00:18 2024-11-4 Show GitHub Exploit DB Packet Storm
313779 4.6 MEDIUM
Physics 		tp-link tapo_h100_firmware This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2024-10523 2024-11-9 00:14 2024-11-4 Show GitHub Exploit DB Packet Storm
313780 8.8 HIGH
Network 		microsoft dataverse Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. NVD-CWE-noinfo
CVE-2024-38139 2024-11-9 00:14 2024-10-16 Show GitHub Exploit DB Packet Storm