Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5061	9.8	緊急 Network	nginxui	Nginx UI	Nginx UI TeamのNginx UIにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-42221	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5062	9.8	緊急 Network	nginxui	Nginx UI	Nginx UI TeamのNginx UIにおける複数の脆弱性	CWE-284 CWE-306	CVE-2026-42222	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5063	6.5	警告 Network	nginxui	Nginx UI	Nginx UI TeamのNginx UIにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-42223	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5064	7.5	重要 Network	n8n	n8n	n8nにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-42226	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5065	6.5	警告 Network	n8n	n8n	n8nにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-42227	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5066	6.5	警告 Network	n8n	n8n	n8nにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-42228	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5067	8.8	重要 Network	n8n	n8n	n8nにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42229	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5068	6.1	警告 Network	n8n	n8n	n8nにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-42230	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5069	8.8	重要 Network	n8n	n8n	n8nにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42231	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5070	8.8	重要 Network	n8n	n8n	n8nにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42232	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314991	8.1	HIGH Network	kubernetes	image_builder	A security issue was discovered in the Kubernetes Image Builder versions <= v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw provi…	CWE-798 Use of Hard-coded Credentials	CVE-2024-9594	2024-11-9 05:50	2024-10-16	Show	GitHub Exploit DB Packet Storm

314992	5.5	MEDIUM Local	avg avast	antivirus	An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing.	CWE-787 Out-of-bounds Write	CVE-2024-9482	2024-11-9 05:49	2024-10-4	Show	GitHub Exploit DB Packet Storm

314993	5.5	MEDIUM Local	avg avast	antivirus	An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing.	CWE-787 Out-of-bounds Write	CVE-2024-9481	2024-11-9 05:49	2024-10-4	Show	GitHub Exploit DB Packet Storm

314994	9.8	CRITICAL Network	cozythemes	fotawp	Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: from n/a through 1.4.1.	CWE-862 Missing Authorization	CVE-2024-43980	2024-11-9 05:45	2024-11-2	Show	GitHub Exploit DB Packet Storm

314995	9.8	CRITICAL Network	cozythemes	blockbooster	Missing Authorization vulnerability in CozyThemes Blockbooster allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blockbooster: from n/a through 1.0.10.	CWE-862 Missing Authorization	CVE-2024-43979	2024-11-9 05:44	2024-11-2	Show	GitHub Exploit DB Packet Storm

314996	9.8	CRITICAL Network	cozythemes	revivenews	Missing Authorization vulnerability in CozyThemes ReviveNews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReviveNews: from n/a through 1.0.2.	CWE-862 Missing Authorization	CVE-2024-43974	2024-11-9 05:43	2024-11-2	Show	GitHub Exploit DB Packet Storm

314997	8.8	HIGH Network	newspack	newspack	Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6.	CWE-862 Missing Authorization	CVE-2024-43968	2024-11-9 05:43	2024-11-2	Show	GitHub Exploit DB Packet Storm

314998	8.8	HIGH Network	lws	affiliation	Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affiliation: from n/a through 2.3.4.	CWE-862 Missing Authorization	CVE-2024-43962	2024-11-9 05:42	2024-11-2	Show	GitHub Exploit DB Packet Storm

314999	5.3	MEDIUM Network	humhub	humhub	Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1…	CWE-209 Information Exposure Through an Error Message	CVE-2024-52043	2024-11-9 05:39	2024-11-6	Show	GitHub Exploit DB Packet Storm

315000	8.1	HIGH Network	heateor	super_socializer	The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.13.68. This is due to …	NVD-CWE-noinfo	CVE-2024-9946	2024-11-9 05:38	2024-11-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed