Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1021	3.3	低 Local	Continue	Continue	Continueにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-8770	2026-05-21 10:54	2026-05-18	Show	GitHub Exploit DB Packet Storm

1022	4.8	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40901	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1023	4.8	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40902	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1024	4.8	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40903	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1025	5.4	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40904	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1026	7.3	重要 Local	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-0541	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1027	7.3	重要 Local	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性	CWE-1287 指定されたタイプの入力に対する不適切な検証	CVE-2026-0802	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1028	7.3	重要 Local	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2026-0804	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1029	8.8	重要 Network	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-1185	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1030	6.5	警告 Local	Xen プロジェクト	Xen	Xen プロジェクトのXenにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-23557	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2271	4.3	MEDIUM Network	-	-	The GoStats for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the gosta…	CWE-352 Origin Validation Error	CVE-2026-8943	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2272	5.3	MEDIUM Network	-	-	The WP Promoter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_stats() function in versions up to, and including, 1.3. The func…	CWE-862 Missing Authorization	CVE-2026-9014	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2273	8.1	HIGH Network	-	-	The Login with NEAR plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.3.3. The `ajaxLoginWithNear()` function — registered as a `wp_ajax_nopriv` acti…	CWE-287 Improper Authentication	CVE-2026-8994	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2274	7.5	HIGH Network	-	-	The Query Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.2.1 via the shortcode function. This makes it possible for authenticated attacke…	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-9200	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2275	6.4	MEDIUM Network	-	-	The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[lvca_carousel]` and `[lvca_posts_carousel]` shortcode attributes in all versio…	CWE-79 Cross-site Scripting	CVE-2026-2030	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2276	6.1	MEDIUM Network	-	-	The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output…	CWE-79 Cross-site Scripting	CVE-2026-3001	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2277	6.5	MEDIUM Network	-	-	The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` function in all versions…	CWE-862 Missing Authorization	CVE-2026-3279	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2278	6.4	MEDIUM Network	-	-	The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lvca_admin_ajax` AJAX action in all versions up to, and including, 3.9.4 due to…	CWE-862 Missing Authorization	CVE-2026-3895	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2279	6.4	MEDIUM Network	-	-	The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lsow_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missing auth…	CWE-862 Missing Authorization	CVE-2026-3896	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2280	7.2	HIGH Network	-	-	The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpoints in all version…	CWE-79 Cross-site Scripting	CVE-2026-3375	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm