Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
195601 5.4 警告
Network 		IBM - IBM Jazz Foundation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6054 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
195602 5.4 警告
Network 		IBM - IBM Jazz Reporting Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6047 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
195603 5.4 警告
Network 		IBM - IBM Jazz Reporting Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5899 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
195604 4.3 警告
Network 		IBM - IBM Jazz Reporting Service における重要な情報を取得される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-5898 2017-02-15 16:59 2016-12-6 Show GitHub Exploit DB Packet Storm
195605 8.1 重要
Network 		IBM - IBM BigFix Platform におけるコマンドを挿入される脆弱性 CWE-77
コマンドインジェクション 		CVE-2016-0396 2017-02-15 16:30 2016-11-7 Show GitHub Exploit DB Packet Storm
195606 7.8 重要
Local 		IBM - IBM AIX の bellmail バイナリにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-1093 2017-02-15 16:28 2017-01-29 Show GitHub Exploit DB Packet Storm
195607 5.3 警告
Network 		IBM - IBM Security Key Lifecycle Manager における重要な情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2016-6117 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
195608 5.9 警告
Network 		IBM - IBM Security Key Lifecycle Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-6116 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
195609 8.2 重要
Network 		IBM - IBM Security Key Lifecycle Manager における保護された領域にアクセスされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6105 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
195610 8.8 重要
Network 		IBM - IBM Security Key Lifecycle Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-6103 2017-02-15 16:28 2016-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or Jav… New CWE-79
Cross-site Scripting 		CVE-2026-40230 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
62 - - - Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered une… New CWE-79
Cross-site Scripting 		CVE-2026-40229 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
63 - - - If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different tha… New CWE-22
Path Traversal 		CVE-2026-3087 2026-04-30 01:16 2026-04-28 Show GitHub Exploit DB Packet Storm
64 - - - Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads d… New - CVE-2026-38993 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
65 - - - Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially crafted filename bypasses an extension filter. This allows an au… New - CVE-2026-38991 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
66 - - - Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to properly sanitize user i… New - CVE-2026-38949 2026-04-30 01:16 2026-04-29 Show GitHub Exploit DB Packet Storm
67 6.1 MEDIUM
Network 		- - A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the uns… New CWE-79
Cross-site Scripting 		CVE-2026-37750 2026-04-30 01:16 2026-04-29 Show GitHub Exploit DB Packet Storm
68 - - - An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When … New - CVE-2026-37555 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
69 7.5 HIGH
Network 		- - TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function. New CWE-121
Stack-based Buffer Overflow 		CVE-2026-36837 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
70 - - - An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests. New - CVE-2026-30769 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm