Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
821 6.5 警告
Network
Google Android GoogleのAndroidにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2026-0144 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
822 3.3
Local
Google Android GoogleのAndroidにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-0145 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
823 8.8 重要
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-120
CWE-787
CVE-2026-0146 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
824 8.8 重要
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-120
CWE-787
CVE-2026-0147 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
825 8.8 重要
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-0148 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
826 8.8 重要
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-122
CWE-787
CVE-2026-0149 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
827 7.8 重要
Local
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-0150 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
828 8.8 重要
Network
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-0151 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
829 3.3
Local
Google Android GoogleのAndroidにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-0158 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
830 8.8 重要
Network
Google Android GoogleのAndroidにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー
CVE-2026-0160 2026-06-22 11:45 2026-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
320751 9.8 CRITICAL
Network
dataease dataease DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection stri… NVD-CWE-noinfo
CVE-2024-46997 2024-10-8 02:20 2024-09-24 Show GitHub Exploit DB Packet Storm
320752 9.1 CRITICAL
Network
circutor tcp2rs\+_firmware Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, witho… NVD-CWE-noinfo
CVE-2024-8892 2024-10-8 02:10 2024-09-18 Show GitHub Exploit DB Packet Storm
320753 9.1 CRITICAL
Network
circutor tcp2rs\+_firmware Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, witho… NVD-CWE-noinfo
CVE-2024-8889 2024-10-8 02:09 2024-09-18 Show GitHub Exploit DB Packet Storm
320754 6.1 MEDIUM
Network
wireui wireui Wire UI is a library of components and resources to empower Laravel and Livewire application development. A potential Cross-Site Scripting (XSS) vulnerability has been identified in the `/wireui/butt… CWE-79
Cross-site Scripting
CVE-2024-45803 2024-10-8 02:05 2024-09-18 Show GitHub Exploit DB Packet Storm
320755 5.3 MEDIUM
Network
smartsearchwp smartsearchwp The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, t… CWE-862
 Missing Authorization
CVE-2024-6845 2024-10-8 01:58 2024-09-25 Show GitHub Exploit DB Packet Storm
320756 4.8 MEDIUM
Network
ronvalstar pocket_widget The Pocket Widget WordPress plugin through 0.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks… CWE-79
Cross-site Scripting
CVE-2024-7918 2024-10-8 01:56 2024-09-9 Show GitHub Exploit DB Packet Storm
320757 4.6 MEDIUM
Local
tenable nessus_network_monitor A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI. CWE-79
Cross-site Scripting
CVE-2024-9158 2024-10-8 01:13 2024-10-1 Show GitHub Exploit DB Packet Storm
320758 5.4 MEDIUM
Network
kvf-admin_project kvf-admin A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff. Affected is an unknown function of the file /ueditor/upload?configPath=… CWE-79
Cross-site Scripting
CVE-2024-9291 2024-10-8 01:13 2024-09-28 Show GitHub Exploit DB Packet Storm
320759 4.3 MEDIUM
Network
digireturn dn_popup The DN Popup WordPress plugin through 1.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack CWE-352
 Origin Validation Error
CVE-2024-7690 2024-10-8 00:56 2024-09-2 Show GitHub Exploit DB Packet Storm
320760 4.8 MEDIUM
Network
wow-company viral_signup The Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks e… CWE-79
Cross-site Scripting
CVE-2024-6927 2024-10-8 00:56 2024-08-29 Show GitHub Exploit DB Packet Storm