Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
210421	6	警告	ヒューレット・パッカード	-	HP System Management Homepage におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-2134	2015-07-24 10:47	2015-07-20	Show	GitHub Exploit DB Packet Storm

210422	4.3	警告	Kaseya	-	Kaseya Virtual System Administrator におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2015-2863	2015-07-24 09:59	2015-07-13	Show	GitHub Exploit DB Packet Storm

210423	4	警告	Kaseya	-	Kaseya Virtual System Administrator におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2015-2862	2015-07-24 09:48	2015-07-13	Show	GitHub Exploit DB Packet Storm

210424	5	警告	ジュニパーネットワークス	-	Juniper Junos OS の IPv6 sendd におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-5360	2015-07-24 09:39	2015-07-22	Show	GitHub Exploit DB Packet Storm

210425	5	警告	ジュニパーネットワークス	-	複数の Juniper スイッチ製品の Junos OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-5357	2015-07-24 09:39	2015-07-22	Show	GitHub Exploit DB Packet Storm

210426	9.3	危険	Eaton	-	Eaton Cooper Power System Form 6 Control および Idea/IdeaPLUS Relays 上で稼働する ProView における TCP セッションを偽装される脆弱性	CWE-Other その他	CVE-2014-9196	2015-07-23 18:35	2014-12-2	Show	GitHub Exploit DB Packet Storm

210427	9	危険	シトリックス・システムズ	-	Citrix NetScaler Application Delivery Controller および NetScaler Gateway の Management Interface における任意の shell コマンドを実行される脆弱性	CWE-Other その他	CVE-2015-5080	2015-07-23 17:29	2015-06-3	Show	GitHub Exploit DB Packet Storm

210428	4.3	警告	シスコシステムズ	-	Cisco Adaptive Security Appliance ソフトウェアなどの製品に同梱されている Cavium 暗号モジュールのファームウェアの TLS の実装における TLS コンテンツになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2015-4458	2015-07-23 17:07	2015-07-14	Show	GitHub Exploit DB Packet Storm

210429	5	警告	シスコシステムズ	-	ASR 9000 デバイス上で稼働する Cisco IOS XR の Concurrent Data Management Replication プロセスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-4284	2015-07-23 17:07	2015-07-21	Show	GitHub Exploit DB Packet Storm

210430	6.8	警告	シスコシステムズ	-	Cisco WebEx Meetings Server におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-4281	2015-07-23 17:06	2015-07-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2071	6.4	MEDIUM Network	-	-	The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[lvca_carousel]` and `[lvca_posts_carousel]` shortcode attributes in all versio…	CWE-79 Cross-site Scripting	CVE-2026-2030	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2072	6.1	MEDIUM Network	-	-	The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output…	CWE-79 Cross-site Scripting	CVE-2026-3001	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2073	6.5	MEDIUM Network	-	-	The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` function in all versions…	CWE-862 Missing Authorization	CVE-2026-3279	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2074	6.4	MEDIUM Network	-	-	The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lvca_admin_ajax` AJAX action in all versions up to, and including, 3.9.4 due to…	CWE-862 Missing Authorization	CVE-2026-3895	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2075	6.4	MEDIUM Network	-	-	The Livemesh SiteOrigin Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `lsow_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missing auth…	CWE-862 Missing Authorization	CVE-2026-3896	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2076	7.2	HIGH Network	-	-	The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the /wp-json/litespeed/v1/notify_ccss and /wp-json/litespeed/v1/notify_ucss REST API endpoints in all version…	CWE-79 Cross-site Scripting	CVE-2026-3375	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2077	6.4	MEDIUM Network	-	-	The Livemesh Addons for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `labb_admin_ajax` AJAX action in all versions up to, and including, 3.9.2 due to missi…	CWE-862 Missing Authorization	CVE-2026-3897	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2078	7.2	HIGH Network	-	-	The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the plugin using the BladeOne templating engine's runStri…	CWE-94 Code Injection	CVE-2026-6169	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2079	4.9	MEDIUM Network	-	-	The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.4.5 due to in…	CWE-89 SQL Injection	CVE-2026-7618	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm

2080	6.4	MEDIUM Network	-	-	The Github Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repo' shortcode attribute in the 'github' shortcode in all versions up to, and including, 0.1 due to in…	CWE-79 Cross-site Scripting	CVE-2026-8042	2026-05-27 23:50	2026-05-27	Show	GitHub Exploit DB Packet Storm