Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4341 7.8 重要
Local 		wkentaro gdown wkentaroのgdownにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40491 2026-05-7 12:01 2026-04-18 Show GitHub Exploit DB Packet Storm
4342 7.4 重要
Network 		Skim-rs Skim Skim-rsのSkimにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41414 2026-05-7 12:01 2026-04-24 Show GitHub Exploit DB Packet Storm
4343 7.5 重要
Network 		Apache Software Foundation Apache Neethi Apache Software FoundationのApache Neethiにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-42402 2026-05-7 12:01 2026-05-1 Show GitHub Exploit DB Packet Storm
4344 7.5 重要
Network 		Apache Software Foundation Apache Neethi Apache Software FoundationのApache Neethiにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-42403 2026-05-7 12:01 2026-05-1 Show GitHub Exploit DB Packet Storm
4345 7.2 重要
Network 		Apache Software Foundation Apache Neethi Apache Software FoundationのApache Neethiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42404 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
4346 7.1 重要
Local 		Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2026-42476 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
4347 7.1 重要
Local 		Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-42477 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
4348 7.5 重要
Network 		Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における複数の脆弱性 CWE-125
CWE-476
CVE-2026-42478 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
4349 5.5 警告
Local 		Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT) Open CASCADE Technology (OCCT)における境界外読み取りに関する脆弱性 CWE-125
CWE-125
CVE-2026-42479 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
4350 9.8 緊急
Network 		hashcat hashcat hashcatにおける複数の脆弱性 CWE-121
CWE-787
CVE-2026-42482 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314521 - - - Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through … CWE-862
 Missing Authorization 		CVE-2024-38774 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314522 - - - Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix Shortcodes: from n/a through 2.1.1… CWE-862
 Missing Authorization 		CVE-2024-38769 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314523 - - - Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9. CWE-862
 Missing Authorization 		CVE-2024-38748 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314524 - - - Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesale Suite: from n/a through 2.1.12. CWE-862
 Missing Authorization 		CVE-2024-38745 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314525 - - - Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email P… CWE-862
 Missing Authorization 		CVE-2024-38744 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314526 - - - Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows . This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0. CWE-862
 Missing Authorization 		CVE-2024-38743 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314527 - - - Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Packlink PRO ship… CWE-862
 Missing Authorization 		CVE-2024-38740 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314528 - - - Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: fr… CWE-862
 Missing Authorization 		CVE-2024-38737 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314529 - - - Missing Authorization vulnerability in Meks Meks Video Importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meks Video Importer: from n/a through 1.0.12. - CVE-2024-38733 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm
314530 - - - Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post … CWE-862
 Missing Authorization 		CVE-2024-38727 2024-11-2 00:15 2024-11-2 Show GitHub Exploit DB Packet Storm