Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4281 7.8 重要
Local 		Rapid7 Insight Agent Rapid7のInsight Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-6482 2026-04-30 10:57 2026-04-17 Show GitHub Exploit DB Packet Storm
4282 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6785 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
4283 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6786 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
4284 7.8 重要
Local 		IObit Malware Fighter IObitのMalware Fighterにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2016-20059 2026-04-28 10:14 2026-04-4 Show GitHub Exploit DB Packet Storm
4285 6.3 警告
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-62233 2026-04-28 10:14 2026-04-24 Show GitHub Exploit DB Packet Storm
4286 2.9 低
Local 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-22007 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4287 5.3 警告
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-22013 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4288 7.5 重要
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における複数の脆弱性 CWE-200
CWE-502
CVE-2026-22016 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4289 3.7 低
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-22018 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4290 5.3 警告
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22021 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 6.5 MEDIUM
Network 		- - Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Manipulating Hidden Fields.This issue affects Ads by WPQuads: from n/a … CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-42744 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1292 7.3 HIGH
Network 		- - Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Authentication Bypass.This issue affects Smart Online Order… CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-42745 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1293 7.3 HIGH
Network 		- - Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Retrieve Embedded Sensitive Data.This issue affects Smart Online O… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-42746 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1294 9.3 CRITICAL
Network 		- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects … CWE-89
SQL Injection 		CVE-2026-42747 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1295 9.9 CRITICAL
Network 		- - Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through <= 5.4.… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-42748 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1296 7.1 HIGH
Network 		- - Authentication Bypass Using an Alternate Path or Channel vulnerability in Themeisle Disable Comments for Any Post Types (Remove comments) comments-plus allows Password Recovery Exploitation.This issu… CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-42749 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1297 6.5 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <… CWE-79
Cross-site Scripting 		CVE-2026-42750 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1298 6.5 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking Manager booking-manager allows Stored XSS.This issue affects Booking Manager: f… CWE-79
Cross-site Scripting 		CVE-2026-42751 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1299 7.3 HIGH
Network 		- - Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: … CWE-862
 Missing Authorization 		CVE-2026-42753 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm
1300 7.1 HIGH
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phbernard Favicon favicon-by-realfavicongenerator allows Reflected XSS.This issue affects Favicon… CWE-79
Cross-site Scripting 		CVE-2026-42754 2026-05-27 23:50 2026-05-27 Show GitHub Exploit DB Packet Storm