Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1101	5.4	警告 Network	SeaCMS	SeaCMS	SeaCMSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2020-36932	2026-01-29 16:01	2026-01-25	Show	GitHub Exploit DB Packet Storm

1102	4.3	警告 Network	webberzone	top 10	webberzoneのWordPress用top 10における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2023-25993	2026-01-29 16:01	2024-12-9	Show	GitHub Exploit DB Packet Storm

1103	6.5	警告 Network	Joom Sky	JS Job Manager	Joom SkyのWordPress用JS Job Managerにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2023-28689	2026-01-29 16:01	2024-12-9	Show	GitHub Exploit DB Packet Storm

1104	3.3	低 Local		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2024-44210	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

1105	7.8	重要 Local	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2024-44238	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

1106	9.8	緊急 Network	wpwebelite	WooCommerce PDF Vouchers	WPWeb EliteのWordPress用WooCommerce PDF Vouchersにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2024-54383	2026-01-29 16:01	2024-12-18	Show	GitHub Exploit DB Packet Storm

1107	2.4	低 Physics	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2024-54556	2026-01-29 16:01	2026-01-16	Show	GitHub Exploit DB Packet Storm

1108	6.1	警告 Network	wpwebelite	WooCommerce PDF Vouchers	WPWeb EliteのWordPress用WooCommerce PDF Vouchersにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-56265	2026-01-29 16:01	2024-12-31	Show	GitHub Exploit DB Packet Storm

1109	9.8	緊急 Network	Imagination Technologies Limited	GPU DDK	Imagination Technologies LimitedのGPU DDKにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-13952	2026-01-29 16:01	2026-01-24	Show	GitHub Exploit DB Packet Storm

1110	6.3	警告 Local	Haxx	cURL	HaxxのcURLにおける不特定の脆弱性	CWE-Other その他	CVE-2025-14017	2026-01-29 16:01	2026-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
491	6.5	MEDIUM Network	-	-	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi. New	CWE-77 Command Injection	CVE-2026-31168	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

492	6.5	MEDIUM Network	-	-	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi. New	CWE-77 Command Injection	CVE-2026-31169	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

493	6.5	MEDIUM Network	-	-	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi. New	CWE-77 Command Injection	CVE-2026-31173	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

494	8.0	HIGH Network	dnnsoftware	dotnetnuke	DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could incl… Update	CWE-87 Improper Neutralization of Alternate XSS Syntax	CVE-2026-40321	2026-04-24 23:41	2026-04-18	Show	GitHub Exploit DB Packet Storm

495	9.6	CRITICAL Network	-	-	Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. New	CWE-284 Improper Access Control	CVE-2026-24303	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

496	8.6	HIGH Network	-	-	Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-26150	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

497	3.7	LOW Network	-	-	A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each hea… New	CWE-444 HTTP Request Smuggling	CVE-2026-2708	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

498	8.0	HIGH Network	-	-	Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. New	CWE-427 Uncontrolled Search Path Element	CVE-2026-32172	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

499	9.3	CRITICAL Network	-	-	Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network. New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-32210	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

500	9.3	CRITICAL Network	-	-	Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. New	CWE-601 Open Redirect	CVE-2026-33102	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed