Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1371	7.4	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける未チェックの戻り値に関する脆弱性	CWE-252 未チェックの戻り値	CVE-2026-0723	2026-01-28 12:34	2026-01-22	Show	GitHub Exploit DB Packet Storm

1372	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-1102	2026-01-28 12:34	2026-01-22	Show	GitHub Exploit DB Packet Storm

1373	7.8	重要 Local	マイクロソフト	Office Long Term Servicing Channel (LTSC) Microsoft Office Microsoft 365 Apps	Microsoft Office のセキュリティ機能のバイパスの脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-21509	2026-01-28 12:34	2026-01-26	Show	GitHub Exploit DB Packet Storm

1374	9.8	緊急 Network	Oxygenz	ClipBucket V5	OxygenzのClipBucket V5におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-21875	2026-01-28 12:34	2026-01-8	Show	GitHub Exploit DB Packet Storm

1375	7.3	重要 Local	greenshot	Greenshot	getgreenshot.orgのGreenshotにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-22035	2026-01-28 12:34	2026-01-8	Show	GitHub Exploit DB Packet Storm

1376	6.5	警告 Network	Rocket.Chat	Rocket.Chat	Rocket.Chatにおける複数の脆弱性	CWE-269 CWE-862	CVE-2026-23477	2026-01-28 12:34	2026-01-14	Show	GitHub Exploit DB Packet Storm

1377	9.8	緊急 Network	GNU Project Debian	Debian GNU/Linux inetutils	Debian等の複数ベンダの製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-24061	2026-01-28 12:34	2026-01-21	Show	GitHub Exploit DB Packet Storm

1378	7.2	重要 Network	HGiga	isherlock	HGigaのisherlockにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-4298	2026-01-28 12:31	2024-04-29	Show	GitHub Exploit DB Packet Storm

1379	7.2	重要 Network	HGiga	isherlock	HGigaのisherlockにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-4299	2026-01-28 12:31	2024-04-29	Show	GitHub Exploit DB Packet Storm

1380	7.9	重要 Local	ARM Ltd.	Neoverse V3 ファームウェア Arm C1-Premium ファームウェア Cortex-X925 ファームウェア Cortex-X4 ファームウェア Neoverse V3AE ファームウェア Neoverse V2 ファームウェア Cortex-X…	ARM Ltd.のArm C1-Premium ファームウェア等の複数製品における再利用前に削除されていないリソース内重要情報に関する脆弱性	CWE-226 再利用前に削除されていないリソース内重要情報	CVE-2025-0647	2026-01-28 12:31	2026-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
461	8.8	HIGH Network	google	chrome	Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)	CWE-843 Type Confusion	CVE-2026-6301	2026-04-18 00:41	2026-04-16	Show	GitHub Exploit DB Packet Storm

462	8.8	HIGH Network	google	chrome	Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)	CWE-122 Heap-based Buffer Overflow	CVE-2026-6306	2026-04-18 00:40	2026-04-16	Show	GitHub Exploit DB Packet Storm

463	7.5	HIGH Network	-	-	A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.	CWE-122 Heap-based Buffer Overflow	CVE-2026-30999	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

464	5.4	MEDIUM Network	-	-	Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, …	CWE-79 Cross-site Scripting	CVE-2025-63743	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

465	7.5	HIGH Network	-	-	A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet.	CWE-476 NULL Pointer Dereference	CVE-2025-66769	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

466	8.4	HIGH Local	-	-	Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). During execution, an internal XID object is allocated a…	CWE-416 Use After Free	CVE-2025-69627	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

467	-		-	-	Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload. This issue affects Pandora FMS: from 777 through 800	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2026-30804	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

468	-		-	-	Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report. This issue affects Pandora FMS: from 777 through 800	CWE-78 OS Command	CVE-2026-30806	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

469	-		-	-	Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug. This issue affects Pandora FMS: from 777 through 800	CWE-78 OS Command	CVE-2026-30809	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

470	-		-	-	Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800	CWE-276 Incorrect Default Permissions	CVE-2026-30811	2026-04-18 00:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed