Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3061	8.1	重要 Network	Qode Interactive	Backpack Traveler	Qode InteractiveのWordPress用Backpack TravelerにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-39490	2026-02-2 19:19	2025-05-23	Show	GitHub Exploit DB Packet Storm

3062	9.8	緊急 Network	Qode Interactive	Wilmer	Qode InteractiveのWordPress用WilmerにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-39494	2026-02-2 19:19	2025-05-23	Show	GitHub Exploit DB Packet Storm

3063	6.1	警告 Network	IDI Eikon	Governalia	IDI EikonのGovernaliaにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40700	2026-02-2 19:19	2025-12-2	Show	GitHub Exploit DB Packet Storm

3064	6.5	警告 Network	GAMS	access control system	GAMSのaccess control systemにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2025-41086	2026-02-2 19:19	2025-12-2	Show	GitHub Exploit DB Packet Storm

3065	9.8	緊急 Network	Nugine	wgp	Nugineのwgpにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2025-47735	2026-02-2 19:19	2025-05-9	Show	GitHub Exploit DB Packet Storm

3066	9.8	緊急 Network	Geoffroy Couprie	trailer	Geoffroy Couprieのtrailerにおけるメモリ管理ルーチンの不一致に関する脆弱性	CWE-762 メモリ管理ルーチンの不一致	CVE-2025-47737	2026-02-2 19:19	2025-05-9	Show	GitHub Exploit DB Packet Storm

3067	9.8	緊急 Network	tickbh	Process Lock	tickbhのProcess Lockにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2025-48751	2026-02-2 19:19	2025-05-24	Show	GitHub Exploit DB Packet Storm

3068	9.8	緊急 Network	Andrei Odintsov	Process Sync	Andrei OdintsovのProcess Syncにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-48752	2026-02-2 19:19	2025-05-24	Show	GitHub Exploit DB Packet Storm

3069	9.8	緊急 Network	Obsidian Dynamics	Anode	Obsidian DynamicsのAnodeにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2025-48753	2026-02-2 19:19	2025-05-24	Show	GitHub Exploit DB Packet Storm

3070	7.5	重要 Network	Fractal Fir(Micha? Kostrubiec)	memory_pages	Fractal Fir(Micha? Kostrubiec)のmemory_pagesにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2025-48754	2026-02-2 19:19	2025-05-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
71	9.8	CRITICAL Network	-	-	Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell comma… New	CWE-78 OS Command	CVE-2026-42076	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

72	7.1	HIGH Network	-	-	Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can … New	CWE-94 Code Injection	CVE-2026-40563	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

73	-		-	-	wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog. New	-	CVE-2026-38669	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

74	-		-	-	An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. New	-	CVE-2026-37461	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

75	8.8	HIGH Network	-	-	NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated users with exporttemplate or con… New	CWE-183 Permissive List of Allowed Inputs	CVE-2026-29514	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

76	9.8	CRITICAL Network	-	-	vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full sandbox escape with arbitrary code execution. Attacker code inside VM.run() obtains host process object and … New	CWE-693 Protection Mechanism Failure	CVE-2026-26956	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

77	9.8	CRITICAL Network	-	-	vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, SuppressedError allows attackers to escape the sandbox and run arbitrary code. This issue has been patched in version 3.11.0. New	CWE-94 CWE-693 Code Injection Protection Mechanism Failure	CVE-2026-26332	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

78	9.6	CRITICAL Adjacent	-	-	Buffer overflow due to incorrect authorization in PLC FW New	CWE-863 Incorrect Authorization	CVE-2026-25293	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

79	5.5	MEDIUM Local	-	-	Memory corruption while processing IOCTL command when device is in power-save state. New	CWE-749 Exposed Dangerous Method or Function	CVE-2026-25266	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

80	9.8	CRITICAL Network	-	-	vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to write code which can es… New	CWE-94 CWE-693 Code Injection Protection Mechanism Failure	CVE-2026-24781	2026-05-5 02:16	2026-05-5	Show	GitHub Exploit DB Packet Storm