Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1301	7.5	重要 Network	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-30645	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1302	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS Evolved Junos OS	ジュニパーネットワークスのJunos OS等の複数製品における符号付き型から符号無し型への変換エラーに関する脆弱性	CWE-195 符号付き型から符号無し型への変換エラー	CVE-2025-30646	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1303	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2025-30647	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1304	7.4	重要 Adjacent	ジュニパーネットワークス	Junos OS Evolved Junos OS	ジュニパーネットワークスのJunos OS等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2025-30648	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1305	7.5	重要 Network	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2025-30649	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1306	7.3	重要 Local	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-30661	2026-01-28 12:37	2025-07-11	Show	GitHub Exploit DB Packet Storm

1307	9.8	緊急 Network	Joom Sky	JS Job Manager	Joom SkyのWordPress用JS Job ManagerにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-32626	2026-01-28 12:37	2025-04-17	Show	GitHub Exploit DB Packet Storm

1308	8.8	重要 Network	IBM	IBM Concert Software	IBMのIBM Concert Softwareにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2025-33015	2026-01-28 12:36	2026-01-20	Show	GitHub Exploit DB Packet Storm

1309	5.4	警告 Network	IBM	IBM Application Gateway	IBMのIBM Application Gatewayにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-36396	2026-01-28 12:36	2026-01-20	Show	GitHub Exploit DB Packet Storm

1310	5.4	警告 Network	IBM	IBM Application Gateway	IBMのIBM Application Gatewayにおけるクロスサイトスクリプティングの脆弱性	CWE-80 クロスサイトスクリプティング (Basic XSS)	CVE-2025-36397	2026-01-28 12:36	2026-01-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
271	-		-	-	protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which …	CWE-94 Code Injection	CVE-2026-41242	2026-04-19 02:16	2026-04-19	Show	GitHub Exploit DB Packet Storm

272	6.4	MEDIUM Network	-	-	The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4.2.1 due to insufficient input s…	CWE-79 Cross-site Scripting	CVE-2026-2986	2026-04-18 21:16	2026-04-18	Show	GitHub Exploit DB Packet Storm

273	5.4	MEDIUM Network	-	-	The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.1, via the 'z_taxonomy_image' shortcode. This is due to the shortcode ren…	CWE-79 Cross-site Scripting	CVE-2026-2505	2026-04-18 19:16	2026-04-18	Show	GitHub Exploit DB Packet Storm

274	6.4	MEDIUM Network	-	-	The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_block shortcode in all versions up to, and including, 3.3.9 due to i…	CWE-79 Cross-site Scripting	CVE-2026-0894	2026-04-18 19:16	2026-04-18	Show	GitHub Exploit DB Packet Storm

275	-		-	-	In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message() manually constructs the NFULA_…	-	CVE-2026-31428	2026-04-18 18:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

276	-		-	-	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp process_sdp() declares union nf_inet_addr rtp_addr …	-	CVE-2026-31427	2026-04-18 18:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

277	-		-	-	In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the rds_ib_connection from conn->c…	-	CVE-2026-31425	2026-04-18 18:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

278	-		-	-	In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Weiming Shi says: xt_match and xt_target…	-	CVE-2026-31424	2026-04-18 18:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

279	-		-	-	In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() m2sm() converts a u32 slope to a u64 scaled value. For large inputs (e.g. …	-	CVE-2026-31423	2026-04-18 18:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

280	-		-	-	In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference on shared blocks flow_change() calls tcf_block_q() and dereferences q->handle t…	-	CVE-2026-31422	2026-04-18 18:16	2026-04-13	Show	GitHub Exploit DB Packet Storm