Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1691 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおける例外的な状況に対する不適切なチェックまたは処理に関する脆弱性 CWE-703
例外的な状況に対する不適切なチェックまたは処理 		CVE-2024-21593 2026-01-26 19:41 2024-04-12 Show GitHub Exploit DB Packet Storm
1692 9 緊急
Network 		WPDeveloper betterdocs WPDeveloperのWordPress用betterdocsにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2024-30226 2026-01-26 19:41 2024-03-28 Show GitHub Exploit DB Packet Storm
1693 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおける隔離または分類に関する脆弱性 CWE-653
不適切な隔離または分類 		CVE-2024-30388 2026-01-26 19:40 2024-04-12 Show GitHub Exploit DB Packet Storm
1694 7.5 重要
Network 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2024-30392 2026-01-26 19:40 2024-04-12 Show GitHub Exploit DB Packet Storm
1695 5.9 警告
Network 		ジュニパーネットワークス Junos OS ジュニパーネットワークスのJunos OSにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2024-30401 2026-01-26 19:40 2024-04-12 Show GitHub Exploit DB Packet Storm
1696 8 重要
Network 		Repute Infosystems arforms form builder Repute InfosystemsのWordPress用arforms form builderにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2024-31270 2026-01-26 19:40 2024-05-8 Show GitHub Exploit DB Packet Storm
1697 6.3 警告
Network 		Repute Infosystems arforms form builder Repute InfosystemsのWordPress用arforms form builderにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-31272 2026-01-26 19:40 2024-04-12 Show GitHub Exploit DB Packet Storm
1698 5.4 警告
Network 		MainWP MainWP Child Reports MainWPのWordPress用MainWP Child Reportsにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2024-33680 2026-01-26 19:40 2024-04-26 Show GitHub Exploit DB Packet Storm
1699 6.1 警告
Network 		Repute Infosystems arforms form builder Repute InfosystemsのWordPress用arforms form builderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-37920 2026-01-26 19:40 2024-07-20 Show GitHub Exploit DB Packet Storm
1700 5.4 警告
Network 		Qode Interactive qi blocks Qode InteractiveのWordPress用qi blocksにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-38712 2026-01-26 19:40 2024-07-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
371 9.8 CRITICAL
Network 		- - An issue in Ntfy ntfy.sh before v.2.21 allows a remote attacker to execute arbitrary code via the parseActions function New CWE-94
Code Injection 		CVE-2026-39087 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
372 9.9 CRITICAL
Network 		- - A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via the documentation upload facility were served as-is on the … New CWE-79
Cross-site Scripting 		CVE-2026-40470 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
373 9.6 CRITICAL
Network 		- - hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to uplo… New CWE-352
 Origin Validation Error 		CVE-2026-40471 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
374 9.9 CRITICAL
Network 		- - In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting (XSS) attacks. New CWE-79
Cross-site Scripting 		CVE-2026-40472 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
375 - - - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when function-based ADD_TA… New CWE-79
CWE-183
Cross-site Scripting
 Permissive List of Allowed Inputs 		CVE-2026-41240 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
376 9.8 CRITICAL
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi. New CWE-78
OS Command  		CVE-2026-31177 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
377 9.8 CRITICAL
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi. New CWE-78
OS Command  		CVE-2026-31178 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
378 6.5 MEDIUM
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi. New CWE-77
Command Injection 		CVE-2026-31179 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
379 9.8 CRITICAL
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi. New CWE-78
OS Command  		CVE-2026-31181 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
380 5.3 MEDIUM
Adjacent 		- - OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may parse a server-provide… New CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-40891 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm