Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
911 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8267 2026-05-15 10:55 2026-05-11 Show GitHub Exploit DB Packet Storm
912 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8290 2026-05-15 10:55 2026-05-11 Show GitHub Exploit DB Packet Storm
913 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける複数の脆弱性 CWE-119
CWE-686
CWE-843
CVE-2026-8389 2026-05-15 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
914 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける複数の脆弱性 CWE-119
CWE-20
CWE-79
CVE-2026-8391 2026-05-15 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
915 8.1 重要
Network 		simple-git project simple-git simple-git projectのsimple-gitにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2022-25860
CVE-2026-28291 		2026-05-15 10:55 2026-04-13 Show GitHub Exploit DB Packet Storm
916 8.8 重要
Network 		Genesys Latitude GenesysのLatitudeにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2025-70420 2026-05-15 10:54 2026-04-21 Show GitHub Exploit DB Packet Storm
917 7.2 重要
Network 		Neo Technology Neo4j Neo TechnologyのNeo4jにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-1497 2026-05-15 10:54 2026-03-11 Show GitHub Exploit DB Packet Storm
918 4.3 警告
Network 		Linux Foundation Kubewarden Linux FoundationのKubewardenにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-29773 2026-05-15 10:54 2026-03-10 Show GitHub Exploit DB Packet Storm
919 8.8 重要
Network 		Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-31222 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
920 8.8 重要
Network 		Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-31223 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311981 - - - TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url. - CVE-2024-46325 2024-10-9 04:35 2024-10-7 Show GitHub Exploit DB Packet Storm
311982 6.3 MEDIUM
Network 		icegram email_subscribers_\&_newsletters The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up … CWE-94
Code Injection 		CVE-2024-8254 2024-10-9 04:08 2024-10-2 Show GitHub Exploit DB Packet Storm
311983 6.1 MEDIUM
Network 		yoginetwork rabbitloader The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to… CWE-79
Cross-site Scripting 		CVE-2024-8800 2024-10-9 03:59 2024-10-2 Show GitHub Exploit DB Packet Storm
311984 6.1 MEDIUM
Network 		themes4wp popularis_extra The Popularis Extra plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up … CWE-79
Cross-site Scripting 		CVE-2024-9353 2024-10-9 03:50 2024-10-4 Show GitHub Exploit DB Packet Storm
311985 5.4 MEDIUM
Network 		iworks pwa The PWA — easy way to Progressive Web App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input … CWE-79
Cross-site Scripting 		CVE-2024-8967 2024-10-9 03:47 2024-10-2 Show GitHub Exploit DB Packet Storm
311986 7.5 HIGH
Network 		cisco meraki_mx65_firmware
meraki_mx64_firmware
meraki_z4c_firmware
meraki_z4_firmware
meraki_z3c_firmware
meraki_z3_firmware
meraki_vmx_firmware
meraki_mx600_firmware
meraki_mx450_… 		A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition on … CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-20502 2024-10-9 03:46 2024-10-3 Show GitHub Exploit DB Packet Storm
311987 6.5 MEDIUM
Network 		soplanning soplanning SQL injection vulnerability in SOPlanning <1.45, via /soplanning/www/user_groupes.php in the by parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to… CWE-89
SQL Injection 		CVE-2024-9574 2024-10-9 03:45 2024-10-8 Show GitHub Exploit DB Packet Storm
311988 6.5 MEDIUM
Network 		soplanning soplanning SQL injection vulnerability in SOPlanning <1.45, through /soplanning/www/groupe_list.php, in the by parameter, which could allow a remote user to send a specially crafted query and extract all the in… CWE-89
SQL Injection 		CVE-2024-9573 2024-10-9 03:45 2024-10-8 Show GitHub Exploit DB Packet Storm
311989 5.4 MEDIUM
Network 		soplanning soplanning Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplanning/www/process/groupe_save.php, in the groupe_id parameter. This could allow … CWE-79
Cross-site Scripting 		CVE-2024-9572 2024-10-9 03:45 2024-10-8 Show GitHub Exploit DB Packet Storm
311990 5.4 MEDIUM
Network 		soplanning soplanning Cross-Site Scripting (XSS) vulnerability in SOPlanning <1.45, due to lack of proper validation of user input via /soplanning/www/process/xajax_server.php, affecting multiple parameters. This could al… CWE-79
Cross-site Scripting 		CVE-2024-9571 2024-10-9 03:45 2024-10-8 Show GitHub Exploit DB Packet Storm