Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198841 9.8 緊急
Network
Katie Seaborn - Wordpress 用 Zotpress プラグインの zp_get_account() における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-1000217 2016-10-12 11:46 2016-09-9 Show GitHub Exploit DB Packet Storm
198842 9.1 緊急
Network
contus-video-comments project - WordPress 用 contus-video-comments プラグインにおける未認証のリモートの .jpg ファイルをアップロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1000112 2016-10-12 11:46 2016-06-15 Show GitHub Exploit DB Packet Storm
198843 8.8 重要
Network
Ipswitch, Inc. - Ipswitch WhatsUp Gold の WrFreeFormText.asp の sUniqueID Parameter におけるブラインド SQLインジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-1000000 2016-10-12 11:46 2016-05-17 Show GitHub Exploit DB Packet Storm
198844 7.8 重要
Local
csv2wpec-coupon project - WordPress 用 csv2wpec-coupon プラグインにおけるリモートファイルをアップロードされる脆弱性 CWE-Other
その他
CVE-2015-1000013 2016-10-12 11:46 2015-09-11 Show GitHub Exploit DB Packet Storm
198845 7.5 重要
Network
mypixs project - WordPress 用 mypixs プラグインにおけるローカルファイルインクルードの脆弱性 CWE-200
情報漏えい
CVE-2015-1000012 2016-10-12 11:46 2015-09-15 Show GitHub Exploit DB Packet Storm
198846 9.8 緊急
Physics
DukaPress - WordPress 用 DukaPress プラグインにおけるブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-1000011 2016-10-12 11:46 2015-08-4 Show GitHub Exploit DB Packet Storm
198847 7.5 重要
Network
simple-image-manipulator project - WordPress 用 simple-image-manipulator プラグインにおけるファイルをダウンロードされる脆弱性 CWE-Other
その他
CVE-2015-1000010 2016-10-12 11:46 2015-07-16 Show GitHub Exploit DB Packet Storm
198848 7.5 重要
Network
wptf-image-gallery project - WordPress 用 wptf-image-gallery プラグインにおけるファイルをダウンロードされる脆弱性 CWE-200
CWE-Other
CVE-2015-1000007 2016-10-12 11:46 2015-07-17 Show GitHub Exploit DB Packet Storm
198849 7.5 重要
Network
andycheeseman - WordPress 用 Recent Backups プラグインにおけるファイルをダウンロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2015-1000006 2016-10-12 11:46 2015-07-13 Show GitHub Exploit DB Packet Storm
198850 7.5 重要
Network
FlaxlandsConsulting - WordPress 用 Candidate Application Form プラグインにおけるファイルをダウンロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2015-1000005 2016-10-12 11:46 2015-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
571 9.8 CRITICAL
Network
- - Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability allows an attacker to run system commands on the underlyin… New CWE-94
Code Injection
CVE-2026-38992 2026-05-1 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
572 7.5 HIGH
Network
- - U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication… New CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-36959 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
573 7.5 HIGH
Network
- - A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management in… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-36958 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
574 7.5 HIGH
Network
- - Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent … New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-36957 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
575 8.8 HIGH
Network
- - A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanism… New CWE-352
 Origin Validation Error
CVE-2026-36956 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
576 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. New - CVE-2026-34998 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
577 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. New - CVE-2026-34997 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
578 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. New - CVE-2026-34996 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
579 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. New - CVE-2026-34995 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
580 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. New - CVE-2026-34994 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm