Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1101	5.4	警告 Network	SeaCMS	SeaCMS	SeaCMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-36932	2026-01-29 16:01	2026-01-25	Show	GitHub Exploit DB Packet Storm

1102	4.3	警告 Network	webberzone	top 10	webberzoneのWordPress用top 10における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2023-25993	2026-01-29 16:01	2024-12-9	Show	GitHub Exploit DB Packet Storm

1103	6.5	警告 Network	Joom Sky	JS Job Manager	Joom SkyのWordPress用JS Job Managerにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2023-28689	2026-01-29 16:01	2024-12-9	Show	GitHub Exploit DB Packet Storm

1104	3.3	低 Local		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2024-44210	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

1105	7.8	重要 Local	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2024-44238	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

1106	9.8	緊急 Network	wpwebelite	WooCommerce PDF Vouchers	WPWeb EliteのWordPress用WooCommerce PDF Vouchersにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2024-54383	2026-01-29 16:01	2024-12-18	Show	GitHub Exploit DB Packet Storm

1107	2.4	低 Physics	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2024-54556	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

1108	6.1	警告 Network	wpwebelite	WooCommerce PDF Vouchers	WPWeb EliteのWordPress用WooCommerce PDF Vouchersにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-56265	2026-01-29 16:01	2024-12-31	Show	GitHub Exploit DB Packet Storm

1109	9.8	緊急 Network	Imagination Technologies Limited	GPU DDK	Imagination Technologies LimitedのGPU DDKにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-13952	2026-01-29 16:01	2026-01-24	Show	GitHub Exploit DB Packet Storm

1110	6.3	警告 Local	Haxx	cURL	HaxxのcURLにおける不特定の脆弱性	CWE-Other その他	CVE-2025-14017	2026-01-29 16:01	2026-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
41	4.8	MEDIUM Network	-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functionality that allows authenticated administrators to inject arbitrary J… New	CWE-79 Cross-site Scripting	CVE-2026-23752	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

42	7.8	HIGH Local	microsoft	windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2022_…	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Update	CWE-362 Race Condition	CVE-2026-32160	2026-04-21 03:15	2026-04-15	Show	GitHub Exploit DB Packet Storm

43	5.7	MEDIUM Network	dell	data_domain_operating_system	Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10 contain an insertion o… Update	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-23775	2026-04-21 03:11	2026-04-17	Show	GitHub Exploit DB Packet Storm

44	7.8	HIGH Local	dell	data_domain_operating_system	Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50… Update	CWE-522 Insufficiently Protected Credentials	CVE-2025-36568	2026-04-21 03:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

45	7.2	HIGH Network	fortinet	fortiweb	An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attack… Update	CWE-787 Out-of-bounds Write	CVE-2026-40688	2026-04-21 03:07	2026-04-15	Show	GitHub Exploit DB Packet Storm

46	8.8	HIGH Network	fortinet	fortiddos-f	A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to execute unauthorized code or com… Update	CWE-89 SQL Injection	CVE-2026-39815	2026-04-21 03:06	2026-04-15	Show	GitHub Exploit DB Packet Storm

47	4.8	MEDIUM Network	fortinet	fortinac-f	An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may a… Update	CWE-601 Open Redirect	CVE-2026-21741	2026-04-21 03:06	2026-04-15	Show	GitHub Exploit DB Packet Storm

48	7.2	HIGH Network	fortinet	fortianalyzer fortianalyzer_cloud fortimanager fortimanager_cloud	An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7… Update	CWE-89 SQL Injection	CVE-2025-61848	2026-04-21 03:05	2026-04-15	Show	GitHub Exploit DB Packet Storm

49	8.8	HIGH Adjacent	fortinet	fortios	A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS … Update	CWE-306 Missing Authentication for Critical Function	CVE-2025-53847	2026-04-21 03:04	2026-04-15	Show	GitHub Exploit DB Packet Storm

50	4.3	MEDIUM Network	fortinet	fortivoice fortindr	An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.… Update	CWE-200 Information Exposure	CVE-2024-23104	2026-04-21 03:03	2026-04-15	Show	GitHub Exploit DB Packet Storm