Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
21	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-45879	2026-06-26 12:00	2026-05-27	Show	GitHub Exploit DB Packet Storm

22	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性 New	CWE-noinfo 情報不足	CVE-2026-45880	2026-06-26 12:00	2026-05-27	Show	GitHub Exploit DB Packet Storm

23	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-45881	2026-06-26 12:00	2026-05-27	Show	GitHub Exploit DB Packet Storm

24	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-45882	2026-06-26 12:00	2026-05-27	Show	GitHub Exploit DB Packet Storm

25	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-45883	2026-06-26 12:00	2026-05-27	Show	GitHub Exploit DB Packet Storm

26	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数アンダーフローの脆弱性 New	CWE-191 整数アンダーフロー	CVE-2026-45884	2026-06-26 12:00	2026-05-27	Show	GitHub Exploit DB Packet Storm

27	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-45885	2026-06-26 11:59	2026-05-27	Show	GitHub Exploit DB Packet Storm

28	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 New	CWE-908 初期化されていないリソースの使用	CVE-2026-45886	2026-06-26 11:59	2026-05-27	Show	GitHub Exploit DB Packet Storm

29	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-45887	2026-06-26 11:59	2026-05-27	Show	GitHub Exploit DB Packet Storm

30	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-45888	2026-06-26 11:59	2026-05-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
259451	5.3	MEDIUM Network	wordpress	wordpress	wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.	CWE-1188 Insecure Default Initialization of Resource	CVE-2017-5491	2024-11-21 12:27	2017-01-15	Show	GitHub Exploit DB Packet Storm

259452	6.1	MEDIUM Network	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or…	CWE-79 Cross-site Scripting	CVE-2017-5490	2024-11-21 12:27	2017-01-15	Show	GitHub Exploit DB Packet Storm

259453	8.8	HIGH Network	wordpress	wordpress	Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash file upload.	CWE-352 Origin Validation Error	CVE-2017-5489	2024-11-21 12:27	2017-01-15	Show	GitHub Exploit DB Packet Storm

259454	6.1	MEDIUM Network	wordpress	wordpress	Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) version…	CWE-79 Cross-site Scripting	CVE-2017-5488	2024-11-21 12:27	2017-01-15	Show	GitHub Exploit DB Packet Storm

259455	5.3	MEDIUM Network	wordpress	wordpress	wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote…	CWE-200 Information Exposure	CVE-2017-5487	2024-11-21 12:27	2017-01-15	Show	GitHub Exploit DB Packet Storm

259456	8.8	HIGH Network	s9y	serendipity	Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.	CWE-352 Origin Validation Error	CVE-2017-5476	2024-11-21 12:27	2017-01-14	Show	GitHub Exploit DB Packet Storm

259457	8.8	HIGH Network	s9y	serendipity	comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.	CWE-352 Origin Validation Error	CVE-2017-5475	2024-11-21 12:27	2017-01-14	Show	GitHub Exploit DB Packet Storm

259458	6.1	MEDIUM Network	s9y	serendipity	Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer hea…	CWE-601 Open Redirect	CVE-2017-5474	2024-11-21 12:27	2017-01-14	Show	GitHub Exploit DB Packet Storm

259459	8.8	HIGH Network	ntop	ntopng	Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user…	CWE-352 Origin Validation Error	CVE-2017-5473	2024-11-21 12:27	2017-01-14	Show	GitHub Exploit DB Packet Storm

259460	7.8	HIGH Local	foxitsoftware	foxit_pdf_toolkit	Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the victim opens the specially crafted PDF file. The Vulnerabili…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5364	2024-11-21 12:27	2017-01-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed