Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6351 8.4 重要
Local 		Electerm project Electerm Electerm projectのElectermにおける複数の脆弱性 CWE-22
CWE-829
CVE-2026-43940 2026-05-11 11:05 2026-05-8 Show GitHub Exploit DB Packet Storm
6352 9.6 緊急
Network 		Electerm project Electerm Electerm projectのElectermにおける複数の脆弱性 CWE-601
CWE-88
CVE-2026-43941 2026-05-11 11:05 2026-05-8 Show GitHub Exploit DB Packet Storm
6353 5.5 警告
Local 		Electerm project Electerm Electerm projectのElectermにおける複数の脆弱性 CWE-200
CWE-312
CVE-2026-43942 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
6354 7.8 重要
Local 		Electerm project Electerm Electerm projectのElectermにおける複数の脆弱性 CWE-78
CWE-88
CVE-2026-43943 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
6355 9.6 緊急
Network 		Electerm project Electerm Electerm projectのElectermにおける複数の脆弱性 CWE-20
CWE-829
CWE-94
CVE-2026-43944 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
6356 4.9 警告
Network 		Kimai project kimai Kimai projectのKimaiにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-44298 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
6357 7.8 重要
Local 		LibreOffice プロジェクト LibreOffice LibreOffice プロジェクトのLibreOfficeにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-4430 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
6358 8.4 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-44334 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
6359 9.8 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-44335 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
6360 9.6 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-20
CWE-22
CWE-829
CWE-913
CWE-94
CVE-2026-44336 2026-05-11 11:04 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1991 6.8 MEDIUM
Network 		- - The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameters in the import_list(), url_detail(), and file_detail() … - CVE-2026-7842 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1992 8.8 HIGH
Network 		- - The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a SQL Injection vulnerability exploitable by … - CVE-2026-8163 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1993 7.1 HIGH
Network 		- - The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into the contact form output on validation errors, leading to a Reflected Cros… - CVE-2026-8172 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1994 5.4 MEDIUM
Network 		- - The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before storing it as post meta and rendering it b… - CVE-2026-8378 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1995 7.5 HIGH
Network 		- - The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file download handler, allowing unauthenticated attackers to download files uploaded by… - CVE-2026-8379 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1996 8.1 HIGH
Network 		- - picklescan before 0.0.28 fails to detect malicious torch.jit.unsupported_tensor_ops.execWrapper function calls embedded in pickle files. Attackers can craft malicious pickle files that bypass pickles… CWE-502
 Deserialization of Untrusted Data 		CVE-2025-71370 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1997 8.3 HIGH
Network 		- - Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (get/put/delete/post). API keys created with mode=all but restricted to a single app via… CWE-269
 Improper Privilege Management 		CVE-2026-56225 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1998 7.5 HIGH
Network 		- - Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the audit_logs table's Row-Level Security (RLS) policy when accessed via the Sup… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-56248 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
1999 9.8 CRITICAL
Network 		- - picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib) exposing eight functions that provide di… CWE-184
 Incomplete Blacklist 		CVE-2026-56315 2026-06-23 23:52 2026-06-23 Show GitHub Exploit DB Packet Storm
2000 7.2 HIGH
Network 		- - An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confi… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2026-10521 2026-06-23 23:33 2026-06-23 Show GitHub Exploit DB Packet Storm