Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1021	3.3	低 Local	Continue	Continue	Continueにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-8770	2026-05-21 10:54	2026-05-18	Show	GitHub Exploit DB Packet Storm

1022	4.8	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40901	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1023	4.8	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40902	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1024	4.8	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40903	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1025	5.4	警告 Network	Nozomi Networks Inc.	cmc Guardian	Nozomi Networks Inc.のCMC等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40904	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

1026	7.3	重要 Local	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-0541	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1027	7.3	重要 Local	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性	CWE-1287 指定されたタイプの入力に対する不適切な検証	CVE-2026-0802	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1028	7.3	重要 Local	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2026-0804	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1029	8.8	重要 Network	アクシスコミュニケーションズ	AXIS OS	アクシスコミュニケーションズのAXIS OSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-1185	2026-05-21 10:54	2026-05-12	Show	GitHub Exploit DB Packet Storm

1030	6.5	警告 Local	Xen プロジェクト	Xen	Xen プロジェクトのXenにおける到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2026-23557	2026-05-21 10:54	2026-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2291	6.5	MEDIUM Network	-	-	Insertion of Sensitive Information Into Sent Data vulnerability in Tom GenerateBlocks allows Retrieve Embedded Sensitive Data. This issue affects GenerateBlocks: from n/a through 2.1.0.	CWE-201 Insertion of Sensitive Information Into Sent Data	CVE-2026-48877	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2292	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slider allows DOM-Based XSS. This issue affects Master Slider: from n/a through 3.…	CWE-79 Cross-site Scripting	CVE-2026-48968	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2293	6.5	MEDIUM Network	-	-	The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 1.4.7 via the Draw SVG widget. This makes it possible for authentica…	CWE-73 External Control of File Name or Path	CVE-2025-0898	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2294	4.8	MEDIUM Network	-	-	The rexCrawler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output esca…	CWE-79 Cross-site Scripting	CVE-2026-2280	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2295	4.8	MEDIUM Network	-	-	The myLinksDump plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_title' parameter in all versions up to, and including, 1.6 due to insufficient input sanitization and o…	CWE-79 Cross-site Scripting	CVE-2026-2288	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2296	4.4	MEDIUM Network	-	-	The MinhNhut Link Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings (Description, Title, and other fields) in all versions up to, and including, 3.6.…	CWE-79 Cross-site Scripting	CVE-2026-3348	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2297	6.1	MEDIUM Network	-	-	The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insuffic…	CWE-79 Cross-site Scripting	CVE-2026-3349	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2298	6.5	MEDIUM Network	-	-	Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Exploiting Incorrectly Configured Access Contr…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-42725	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2299	6.5	MEDIUM Network	-	-	Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects …	CWE-862 Missing Authorization	CVE-2026-42726	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2300	9.3	CRITICAL Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows B…	CWE-89 SQL Injection	CVE-2026-42727	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm