Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
481 9.8 緊急
Network
Apache Software Foundation MINA Apache Software FoundationのMINAにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-42779 2026-05-7 12:04 2026-05-1 Show GitHub Exploit DB Packet Storm
482 7.5 重要
Network
レッドハット
GNOME Project
gdk-pixbuf
Red Hat Enterprise Linux Server TUS
Red Hat Enterprise Linux Server AUS
Red Hat Enterprise Linux
GNOME Project等の複数ベンダの製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-5201 2026-05-7 12:04 2026-03-31 Show GitHub Exploit DB Packet Storm
483 5.5 警告
Local
Wireshark Wireshark Wiresharkにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-5299 2026-05-7 12:04 2026-04-30 Show GitHub Exploit DB Packet Storm
484 8.4 重要
Local
FreeBSD FreeBSD FreeBSDにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-5398 2026-05-7 12:04 2026-04-22 Show GitHub Exploit DB Packet Storm
485 5.5 警告
Local
Wireshark Wireshark Wiresharkにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-5401 2026-05-7 12:03 2026-04-30 Show GitHub Exploit DB Packet Storm
486 8.8 重要
Network
Wireshark Wireshark Wiresharkにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-5402 2026-05-7 12:03 2026-04-30 Show GitHub Exploit DB Packet Storm
487 7.8 重要
Local
Wireshark Wireshark Wiresharkにおける複数の脆弱性 CWE-122
CWE-787
CVE-2026-5403 2026-05-7 12:03 2026-05-1 Show GitHub Exploit DB Packet Storm
488 5.5 警告
Local
Wireshark Wireshark Wiresharkにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2026-5404 2026-05-7 12:03 2026-05-1 Show GitHub Exploit DB Packet Storm
489 7.8 重要
Local
Wireshark Wireshark Wiresharkにおける複数の脆弱性 CWE-122
CWE-787
CVE-2026-5405 2026-05-7 12:03 2026-05-1 Show GitHub Exploit DB Packet Storm
490 5.5 警告
Local
Wireshark Wireshark Wiresharkにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-5406 2026-05-7 12:03 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312561 - - - REDCap 14.7.0 allows HTML injection via the project title of a New Project action. This can lead to resultant logout CSRF via index.php?logout=1, and can also be used to insert a link to an external … - CVE-2024-45527 2024-09-4 00:35 2024-09-2 Show GitHub Exploit DB Packet Storm
312562 - - - Lightdash version 0.1024.6 allows users with the necessary permissions, such as Administrator or Editor, to create and share dashboards. A dashboard that contains HTML elements which point to a threa… - CVE-2024-6586 2024-09-4 00:35 2024-08-31 Show GitHub Exploit DB Packet Storm
312563 - - - Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to i… - CVE-2024-6585 2024-09-4 00:35 2024-08-31 Show GitHub Exploit DB Packet Storm
312564 5.4 MEDIUM
Network
automattic ghacitivity
ghactivity
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic GHActivity allows Stored XSS.This issue affects GHActivity: from n/a through 2.… CWE-79
Cross-site Scripting
CVE-2024-43949 2024-09-4 00:27 2024-08-30 Show GitHub Exploit DB Packet Storm
312565 6.1 MEDIUM
Network
dineshkarki wp_armour Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.… CWE-79
Cross-site Scripting
CVE-2024-43948 2024-09-4 00:22 2024-08-30 Show GitHub Exploit DB Packet Storm
312566 5.4 MEDIUM
Network
sktthemes skt_blocks Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SKT Themes SKT Blocks – Gutenberg based Page Builder allows Stored XSS.This issue affects … CWE-79
Cross-site Scripting
CVE-2024-43946 2024-09-4 00:21 2024-08-30 Show GitHub Exploit DB Packet Storm
312567 5.4 MEDIUM
Network
wpdeveloper embedpress Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4… CWE-79
Cross-site Scripting
CVE-2024-43936 2024-09-4 00:20 2024-08-30 Show GitHub Exploit DB Packet Storm
312568 5.4 MEDIUM
Network
wpdelicious wp_delicious Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Delicious Delicious Recipes – WordPress Recipe Plugin allows Stored XSS.This issue affe… CWE-79
Cross-site Scripting
CVE-2024-43935 2024-09-4 00:19 2024-08-30 Show GitHub Exploit DB Packet Storm
312569 5.4 MEDIUM
Network
robfelty collapsing_archives Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Robert Felty Collapsing Archives allows Stored XSS.This issue affects Collapsing Archives:… CWE-79
Cross-site Scripting
CVE-2024-43934 2024-09-4 00:17 2024-08-30 Show GitHub Exploit DB Packet Storm
312570 6.1 MEDIUM
Network
wpbeaverbuilder beaver_builder Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder allows Reflected XSS.This issue affects Beaver Buil… CWE-79
Cross-site Scripting
CVE-2024-43926 2024-09-4 00:15 2024-08-30 Show GitHub Exploit DB Packet Storm