Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1301	7.5	重要 Network	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-30645	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1302	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS Evolved Junos OS	ジュニパーネットワークスのJunos OS等の複数製品における符号付き型から符号無し型への変換エラーに関する脆弱性	CWE-195 符号付き型から符号無し型への変換エラー	CVE-2025-30646	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1303	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2025-30647	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1304	7.4	重要 Adjacent	ジュニパーネットワークス	Junos OS Evolved Junos OS	ジュニパーネットワークスのJunos OS等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2025-30648	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1305	7.5	重要 Network	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2025-30649	2026-01-28 12:37	2025-04-9	Show	GitHub Exploit DB Packet Storm

1306	7.3	重要 Local	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-30661	2026-01-28 12:37	2025-07-11	Show	GitHub Exploit DB Packet Storm

1307	9.8	緊急 Network	Joom Sky	JS Job Manager	Joom SkyのWordPress用JS Job ManagerにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-32626	2026-01-28 12:37	2025-04-17	Show	GitHub Exploit DB Packet Storm

1308	8.8	重要 Network	IBM	IBM Concert Software	IBMのIBM Concert Softwareにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2025-33015	2026-01-28 12:36	2026-01-20	Show	GitHub Exploit DB Packet Storm

1309	5.4	警告 Network	IBM	IBM Application Gateway	IBMのIBM Application Gatewayにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-36396	2026-01-28 12:36	2026-01-20	Show	GitHub Exploit DB Packet Storm

1310	5.4	警告 Network	IBM	IBM Application Gateway	IBMのIBM Application Gatewayにおけるクロスサイトスクリプティングの脆弱性	CWE-80 クロスサイトスクリプティング (Basic XSS)	CVE-2025-36397	2026-01-28 12:36	2026-01-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
31	8.8	HIGH Network	dell	powerprotect_dp_series_appliance data_domain_operating_system	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.1… Update	CWE-295 Improper Certificate Validation	CVE-2026-23776	2026-04-21 03:17	2026-04-17	Show	GitHub Exploit DB Packet Storm

32	7.2	HIGH Network	dell	powerprotect_dp_series_appliance data_domain_operating_system	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.1… Update	CWE-77 Command Injection	CVE-2026-23778	2026-04-21 03:17	2026-04-17	Show	GitHub Exploit DB Packet Storm

33	5.8	MEDIUM Network	-	-	OpenClaw versions 2026.4.7 before 2026.4.15 fail to enforce local-root containment on tool-result media paths, allowing arbitrary local and UNC file access. Attackers can craft malicious tool-result … New	CWE-73 External Control of File Name or Path	CVE-2026-41389	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

34	7.8	HIGH Local	-	-	Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local attacker to execute arbitrary code via a crafted file New	CWE-277 Insecure Inherited Permissions	CVE-2026-30266	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

35	6.6	MEDIUM Local	-	-	python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbolic links when rewri… New	CWE-59 CWE-61 Link Following UNIX Symbolic Link (Symlink) Following	CVE-2026-28684	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

36	-		-	-	A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and passes its address to… New	-	CVE-2026-26399	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

37	-		-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that allows authenticated staff members to inject malicious JavaScript by manipulating the … New	CWE-79 Cross-site Scripting	CVE-2026-23758	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

38	5.4	MEDIUM Network	-	-	GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFT_Report::Create() without HTML sanitization… New	CWE-79 Cross-site Scripting	CVE-2026-23757	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

39	5.4	MEDIUM Network	-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Controller_Step.InsertSubmit() and Ed… New	CWE-79 Cross-site Scripting	CVE-2026-23756	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

40	4.8	MEDIUM Network	-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where the charset POST parameter is passed directly to SWIFT_Language::Create(… New	CWE-79 Cross-site Scripting	CVE-2026-23753	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm