Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6731 7.1 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-31470 2026-05-11 11:00 2026-04-22 Show GitHub Exploit DB Packet Storm
6732 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31723 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6733 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31724 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6734 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31725 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6735 5.5 警告
Local
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-31726 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6736 5.5 警告
Local
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-31727 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6737 4.7 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態
CVE-2026-31728 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6738 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2026-31729 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6739 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 CWE-415
二重解放
CVE-2026-31730 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
6740 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-31731 2026-05-11 11:00 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
451 5.3 MEDIUM
Network
- - The Premium Addons for KingComposer plugin for WordPress is vulnerable to unauthorized modification and loss of data in versions up to, and including, 1.1.1. This is due to missing authorization and … New CWE-862
 Missing Authorization
CVE-2026-12349 2026-06-30 23:08 2026-06-30 Show GitHub Exploit DB Packet Storm
452 4.4 MEDIUM
Network
- - The Editorial Rating – Product Review & Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'Link URL' Field in all versions up to, and including, 4.0.5 due to insuffi… New CWE-79
Cross-site Scripting
CVE-2026-12560 2026-06-30 23:08 2026-06-30 Show GitHub Exploit DB Packet Storm
453 7.2 HIGH
Network
- - The Ajax Load More - Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'taxonomy_include_children' parameter in all versions up to, and including, 3.4.1 due to insuffi… New CWE-79
Cross-site Scripting
CVE-2026-8141 2026-06-30 23:08 2026-06-30 Show GitHub Exploit DB Packet Storm
454 9.8 CRITICAL
Network
- - The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full) is vulnerable to SQL Injection via the WordPress 'search' parameter in versions up to, and including, 5.0.11 due to i… New CWE-89
SQL Injection
CVE-2026-9711 2026-06-30 23:08 2026-06-30 Show GitHub Exploit DB Packet Storm
455 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-47105 2026-06-30 22:18 2026-06-30 Show GitHub Exploit DB Packet Storm
456 8.8 HIGH
Network
- - luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated into a shell command … New CWE-78
OS Command 
CVE-2026-58000 2026-06-30 21:16 2026-06-30 Show GitHub Exploit DB Packet Storm
457 7.2 HIGH
Network
- - A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration… Update CWE-863
 Incorrect Authorization
CVE-2026-9640 2026-06-30 14:20 2026-06-27 Show GitHub Exploit DB Packet Storm
458 6.4 MEDIUM
Network
- - The MIR blocks and shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute (and other attributes such as 'ready_animation_text') of the 'msc_stats' shor… Update CWE-79
Cross-site Scripting
CVE-2026-8896 2026-06-30 14:20 2026-06-24 Show GitHub Exploit DB Packet Storm
459 7.1 HIGH
Network
bitwarden server Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authenticated Custom users with ManageUsers permission to remove Admin accounts from an organization by expl… Update CWE-862
 Missing Authorization
CVE-2026-57520 2026-06-30 14:19 2026-06-26 Show GitHub Exploit DB Packet Storm
460 6.4 MEDIUM
Network
- - MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows authenticated users to make arbitrary server requests by supplying unvalidat… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-56779 2026-06-30 14:19 2026-06-26 Show GitHub Exploit DB Packet Storm