Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5601	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2026-31770	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5602	8.1	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31771	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5603	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31772	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5604	8.8	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31773	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5605	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31778	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5606	8.1	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31779	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5607	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31780	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5608	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31781	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5609	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31782	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

5610	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31783	2026-05-13 10:25	2026-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2711	4.3	MEDIUM Network	-	-	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Hash Elements: from n…	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-24618	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2712	6.3	MEDIUM Network	-	-	A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function Invoice of the file \application\controllers\Payroll.php of the component Pay…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-12131	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2713	4.9	MEDIUM Network	-	-	The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 3.3.19. This is due to the combine_current_css() …	CWE-22 Path Traversal	CVE-2026-12089	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2714	6.4	MEDIUM Network	-	-	The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Anchor block in versions up to, and including, 2.0.9 due to insuf…	CWE-79 Cross-site Scripting	CVE-2026-3297	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2715	7.5	HIGH Network	-	-	The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and including, 6.0.4 The plugin hooks WordPress's `posts_request` f…	CWE-89 SQL Injection	CVE-2026-9848	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2716	7.2	HIGH Network	-	-	The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Translation Storage in all…	CWE-79 Cross-site Scripting	CVE-2026-9109	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2717	6.4	MEDIUM Network	-	-	The FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_attribute_key' shortcode parameter in versions up to, and including, 3.1.31 This is due to an incomple…	CWE-79 Cross-site Scripting	CVE-2026-9134	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2718	4.3	MEDIUM Network	-	-	The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.0.9. This is due to the pagelayer_sav…	CWE-863 Incorrect Authorization	CVE-2026-2470	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2719	6.4	MEDIUM Network	-	-	The Canvas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitization and output esca…	CWE-79 Cross-site Scripting	CVE-2026-9629	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm

2720	4.3	MEDIUM Network	-	-	The Meow Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the REST API endpoint /wp-json/meow-gallery/v1/save_shortcode in all vers…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-1291	2026-06-16 05:42	2026-06-13	Show	GitHub Exploit DB Packet Storm