Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1691	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける例外的な状況に対する不適切なチェックまたは処理に関する脆弱性	CWE-703 例外的な状況に対する不適切なチェックまたは処理	CVE-2024-21593	2026-01-26 19:41	2024-04-12	Show	GitHub Exploit DB Packet Storm

1692	9	緊急 Network	WPDeveloper	betterdocs	WPDeveloperのWordPress用betterdocsにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2024-30226	2026-01-26 19:41	2024-03-28	Show	GitHub Exploit DB Packet Storm

1693	6.5	警告 Adjacent	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける隔離または分類に関する脆弱性	CWE-653 不適切な隔離または分類	CVE-2024-30388	2026-01-26 19:40	2024-04-12	Show	GitHub Exploit DB Packet Storm

1694	7.5	重要 Network	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2024-30392	2026-01-26 19:40	2024-04-12	Show	GitHub Exploit DB Packet Storm

1695	5.9	警告 Network	ジュニパーネットワークス	Junos OS	ジュニパーネットワークスのJunos OSにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2024-30401	2026-01-26 19:40	2024-04-12	Show	GitHub Exploit DB Packet Storm

1696	8	重要 Network	Repute Infosystems	arforms form builder	Repute InfosystemsのWordPress用arforms form builderにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2024-31270	2026-01-26 19:40	2024-05-8	Show	GitHub Exploit DB Packet Storm

1697	6.3	警告 Network	Repute Infosystems	arforms form builder	Repute InfosystemsのWordPress用arforms form builderにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2024-31272	2026-01-26 19:40	2024-04-12	Show	GitHub Exploit DB Packet Storm

1698	5.4	警告 Network	MainWP	MainWP Child Reports	MainWPのWordPress用MainWP Child Reportsにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2024-33680	2026-01-26 19:40	2024-04-26	Show	GitHub Exploit DB Packet Storm

1699	6.1	警告 Network	Repute Infosystems	arforms form builder	Repute InfosystemsのWordPress用arforms form builderにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-37920	2026-01-26 19:40	2024-07-20	Show	GitHub Exploit DB Packet Storm

1700	5.4	警告 Network	Qode Interactive	qi blocks	Qode InteractiveのWordPress用qi blocksにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-38712	2026-01-26 19:40	2024-07-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
491	6.5	MEDIUM Network	-	-	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the recHour parameter to /cgi-bin/cstecgi.cgi. New	CWE-77 Command Injection	CVE-2026-31168	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

492	6.5	MEDIUM Network	-	-	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the week parameter to /cgi-bin/cstecgi.cgi. New	CWE-77 Command Injection	CVE-2026-31169	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

493	6.5	MEDIUM Network	-	-	An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi. New	CWE-77 Command Injection	CVE-2026-31173	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

494	8.0	HIGH Network	dnnsoftware	dotnetnuke	DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could incl… Update	CWE-87 Improper Neutralization of Alternate XSS Syntax	CVE-2026-40321	2026-04-24 23:41	2026-04-18	Show	GitHub Exploit DB Packet Storm

495	9.6	CRITICAL Network	-	-	Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. New	CWE-284 Improper Access Control	CVE-2026-24303	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

496	8.6	HIGH Network	-	-	Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-26150	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

497	3.7	LOW Network	-	-	A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each hea… New	CWE-444 HTTP Request Smuggling	CVE-2026-2708	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

498	8.0	HIGH Network	-	-	Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. New	CWE-427 Uncontrolled Search Path Element	CVE-2026-32172	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

499	9.3	CRITICAL Network	-	-	Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network. New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-32210	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

500	9.3	CRITICAL Network	-	-	Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. New	CWE-601 Open Redirect	CVE-2026-33102	2026-04-24 23:41	2026-04-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed