Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199361	9.8	緊急 Network	Debian Botan project	-	Botan の PointGFp コンストラクタにおける整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-2195	2016-05-19 10:39	2016-02-1	Show	GitHub Exploit DB Packet Storm

199362	7.5	重要 Network	Debian Botan project	-	Botan の ressol 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-2194	2016-05-19 10:39	2016-02-1	Show	GitHub Exploit DB Packet Storm

199363	7.5	重要 Network	Debian Botan project	-	Botan におけるミリオンメッセージ攻撃を実行される脆弱性	CWE-200 情報漏えい	CVE-2015-7827	2016-05-19 10:39	2015-10-26	Show	GitHub Exploit DB Packet Storm

199364	7.5	重要 Network	Debian Botan project	-	Botan の BER デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-5726	2016-05-19 10:39	2015-08-3	Show	GitHub Exploit DB Packet Storm

199365	7.5	重要 Network	Botan project	-	Botan のミラー-ラビン素数判定法における暗号保護メカニズムを破られる脆弱性	CWE-310 暗号の問題	CVE-2014-9742	2016-05-19 10:39	2014-04-10	Show	GitHub Exploit DB Packet Storm

199366	9.8	緊急 Network	Debian Enlightenment	-	32-bit プラットフォーム上で稼動する imlib2 における整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-4024	2016-05-18 17:18	2016-05-1	Show	GitHub Exploit DB Packet Storm

199367	8.2	重要 Network	Debian Enlightenment	-	imlib2 の GIF ローダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2016-3994	2016-05-18 17:18	2016-05-1	Show	GitHub Exploit DB Packet Storm

199368	7.5	重要 Network	Debian Enlightenment	-	imlib2 の lib/updates.c の the __imlib_MergeUpdate 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2016-3993	2016-05-18 17:18	2016-05-1	Show	GitHub Exploit DB Packet Storm

199369	7.5	重要 Network	Debian Enlightenment	-	imlib2 における整数オーバーフローの脆弱性	CWE-Other その他	CVE-2014-9771	2016-05-18 17:18	2014-12-6	Show	GitHub Exploit DB Packet Storm

199370	7.5	重要 Network	Debian Enlightenment	-	imlib2 におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-9764	2016-05-18 17:18	2014-12-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
451	6.1	MEDIUM Network	lollms	lollms	A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack o…	CWE-79 Cross-site Scripting	CVE-2026-1116	2026-04-18 01:18	2026-04-12	Show	GitHub Exploit DB Packet Storm

452	6.3	MEDIUM Network	-	-	A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown functionality of the file /filemanager.php?p= ajax=true&type=upload of the compon…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-6497	2026-04-18 01:17	2026-04-18	Show	GitHub Exploit DB Packet Storm

453	9.8	CRITICAL Network	-	-	A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.	CWE-89 SQL Injection	CVE-2026-37749	2026-04-18 01:17	2026-04-18	Show	GitHub Exploit DB Packet Storm

454	6.5	MEDIUM Network	phoca	maps	Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.	CWE-79 Cross-site Scripting	CVE-2026-23900	2026-04-18 01:15	2026-04-11	Show	GitHub Exploit DB Packet Storm

455	7.5	HIGH Network	fastify	fastify	Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed entirely by prepending a space to the Content-Type header. The body is still …	CWE-1287 Improper Validation of Specified Type of Input	CVE-2026-33806	2026-04-18 00:49	2026-04-15	Show	GitHub Exploit DB Packet Storm

456	9.6	CRITICAL Network	google	chrome	Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)	CWE-122 Heap-based Buffer Overflow	CVE-2026-6296	2026-04-18 00:42	2026-04-16	Show	GitHub Exploit DB Packet Storm

457	8.3	HIGH Network	google	chrome	Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi…	CWE-416 Use After Free	CVE-2026-6297	2026-04-18 00:42	2026-04-16	Show	GitHub Exploit DB Packet Storm

458	4.3	MEDIUM Network	google	chrome	Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium secu…	CWE-122 Heap-based Buffer Overflow	CVE-2026-6298	2026-04-18 00:41	2026-04-16	Show	GitHub Exploit DB Packet Storm

459	8.8	HIGH Network	google	chrome	Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)	CWE-416 Use After Free	CVE-2026-6299	2026-04-18 00:41	2026-04-16	Show	GitHub Exploit DB Packet Storm

460	8.8	HIGH Network	google	chrome	Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)	CWE-416 Use After Free	CVE-2026-6300	2026-04-18 00:41	2026-04-16	Show	GitHub Exploit DB Packet Storm