Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1681 8.8 重要
Network 		WPDeveloper BetterLinks WPDeveloperのWordPress用BetterLinksにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-45104 2026-01-26 19:41 2025-01-2 Show GitHub Exploit DB Packet Storm
1682 8.8 重要
Network 		byconsole wooodt lite byconsoleのWordPress用wooodt liteにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-47179 2026-01-26 19:41 2025-01-2 Show GitHub Exploit DB Packet Storm
1683 4.3 警告
Network 		WPDeveloper betterdocs WPDeveloperのWordPress用betterdocsにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-47762 2026-01-26 19:41 2024-12-9 Show GitHub Exploit DB Packet Storm
1684 8.8 重要
Network 		Automattic Inc. Jetpack Automattic Inc.のWordPress用Jetpackにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2023-47788 2026-01-26 19:41 2024-06-19 Show GitHub Exploit DB Packet Storm
1685 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2023-53512 2026-01-26 19:41 2025-10-1 Show GitHub Exploit DB Packet Storm
1686 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2023-53514 2026-01-26 19:41 2025-10-1 Show GitHub Exploit DB Packet Storm
1687 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2023-53518 2026-01-26 19:41 2025-10-1 Show GitHub Exploit DB Packet Storm
1688 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2023-53527 2026-01-26 19:41 2025-10-1 Show GitHub Exploit DB Packet Storm
1689 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2023-53529 2026-01-26 19:41 2025-10-1 Show GitHub Exploit DB Packet Storm
1690 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2023-53531 2026-01-26 19:41 2025-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
441 6.1 MEDIUM
Local 		- - melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, an attacker who can influence a melange configuration file — for exampl… New CWE-22
Path Traversal 		CVE-2026-29050 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
442 4.4 MEDIUM
Local 		- - melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, `melange lint --persist-lint-results` (opt-in flag, also usable via `me… New CWE-22
Path Traversal 		CVE-2026-29051 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
443 7.6 HIGH
Network 		- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 through 4.4.0 have an SQL injection vulnerability in the API rou… New CWE-89
CWE-184
SQL Injection
 Incomplete Blacklist 		CVE-2026-31952 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
444 5.3 MEDIUM
Network 		- - go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash a… New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-32952 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
445 - - - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the haproxy_section_save interface presents a vulnerability that could lead to remote … New CWE-22
Path Traversal 		CVE-2026-33076 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
446 - - - Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 8.2.6.4 have a SQL injection vulnerability in the haproxy_section_save function in app/routes/… New CWE-89
SQL Injection 		CVE-2026-33078 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
447 6.4 MEDIUM
Network 		- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Site Scripting (XSS) vulnerability in versions prior to 4.4.1 … New CWE-79
Cross-site Scripting 		CVE-2026-31953 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
448 4.9 MEDIUM
Network 		- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery (SSRF) vulnerability in versions… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-31955 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
449 4.3 MEDIUM
Network 		- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4.4.1, any authenticated user can manually construct a URL t… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-31956 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
450 - - - Kirby is an open-source content management system. Kirby's `Xml::value()` method has special handling for `<![CDATA[ ]]>` blocks. If the input value is already valid `CDATA`, it is not escaped a seco… New CWE-91
Blind XPath Injection 		CVE-2026-32870 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm