Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":Feb. 9, 2026, 12:59 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 11 | 5.3 |
警告
Network |
Zeit, Inc. | AI | Vercel, Inc. (旧 Zeit, Inc.)のAIにおける入力確認に関する脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2025-48985 | 2026-02-6 10:41 | 2025-11-7 | Show | GitHub Exploit DB Packet Storm |
| 12 | 5.5 |
警告
Local |
Open JS Foundation | ESLint | Open JS FoundationのESLintにおける再帰制御に関する脆弱性 |
CWE-674
不適切な再帰制御 |
CVE-2025-50537 | 2026-02-6 10:40 | 2026-01-26 | Show | GitHub Exploit DB Packet Storm |
| 13 | 6.1 |
警告
Network |
nuxt | Nuxt Devtools | nuxtのNuxt Devtoolsにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2025-52662 | 2026-02-6 10:40 | 2025-11-7 | Show | GitHub Exploit DB Packet Storm |
| 14 | 7.8 |
重要
Local |
Synology Inc. | BeeDrive | Synology Inc.のBeeDriveにおける重要な機能に対する認証の欠如に関する脆弱性 |
CWE-306
重要な機能に対する認証の欠如 解説 |
CVE-2025-54158 | 2026-02-6 10:40 | 2025-12-4 | Show | GitHub Exploit DB Packet Storm |
| 15 | 7.5 |
重要
Network |
Synology Inc. | BeeDrive | Synology Inc.のBeeDriveにおける認証の欠如に関する脆弱性 |
CWE-862
認証の欠如 |
CVE-2025-54159 | 2026-02-6 10:40 | 2025-12-4 | Show | GitHub Exploit DB Packet Storm |
| 16 | 7.8 |
重要
Local |
Synology Inc. | BeeDrive | Synology Inc.のBeeDriveにおけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2025-54160 | 2026-02-6 10:40 | 2025-12-4 | Show | GitHub Exploit DB Packet Storm |
| 17 | 9.8 |
緊急
Network |
ThemeMove | UniCamp | ThemeMoveのWordPress用UniCampにおけるPHP リモートファイルインクルージョンの脆弱性 |
CWE-98
PHP リモートファイルインクルージョン |
CVE-2025-54701 | 2026-02-6 10:40 | 2025-08-14 | Show | GitHub Exploit DB Packet Storm |
| 18 | 5.3 |
警告
Network |
Codeshare | Codeshare | Codeshareにおける情報漏えいに関する脆弱性 |
CWE-200
情報漏えい |
CVE-2025-60925 | 2026-02-6 10:40 | 2025-11-4 | Show | GitHub Exploit DB Packet Storm |
| 19 | 6.1 |
警告
Network |
Zucchetti s.p.a. |
Infinity Zucchetti ZMaintenance Infinity |
Zucchetti s.p.a.のZMaintenance Infinity等の複数製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2025-61431 | 2026-02-6 10:40 | 2025-11-4 | Show | GitHub Exploit DB Packet Storm |
| 20 | 9.1 |
緊急
Network |
Shopify |
remix-run/deno @remix-run/node @react-router/node |
Shopifyの@react-router/node等の複数製品におけるパストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2025-61686 | 2026-02-6 10:40 | 2026-01-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:April 15, 2026, 12:17 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 51 | 7.5 |
HIGH
Network |
xmlsoft redhat |
libxslt openshift_container_platform enterprise_linux |
Se encontró una falla en la librería libxslt. El mismo campo de memoria, psvi, se utiliza tanto para la hoja de estilo como para los datos de entrada, lo que puede provocar confusión de tipos durante… Update |
CWE-843
Type Confusion |
CVE-2025-7424 | 2026-04-15 07:16 | 2025-07-10 | Show | GitHub Exploit DB Packet Storm |
| 52 | 5.3 |
MEDIUM
Network |
- | - | The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the redirect function in all versions up to, and including, 8.3.0. This ma… New |
CWE-862
Missing Authorization |
CVE-2025-15565 | 2026-04-15 07:16 | 2026-04-15 | Show | GitHub Exploit DB Packet Storm |
| 53 | 5.6 |
MEDIUM
Local |
- | - | A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an … Update |
CWE-362
Race Condition |
CVE-2024-12747 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 54 | 5.6 |
MEDIUM
Local |
- | - | Se encontró un fallo en rsync. Esta vulnerabilidad surge de una condición de ejecución durante la gestión de enlaces simbólicos por parte de rsync. El comportamiento predeterminado de rsync cuando en… Update |
CWE-362
Race Condition |
CVE-2024-12747 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 55 | 7.5 |
HIGH
Network |
samba redhat archlinux gentoo nixos novell tritondatacenter almalinux |
rsync discovery openshift_container_platform enterprise_linux enterprise_linux_eus enterprise_linux_for_arm_64 enterprise_linux_for_arm_64_eus enterprise_linux_for_ibm_z_systems<… |
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it… Update |
CWE-22
Path Traversal |
CVE-2024-12088 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 56 | 7.5 |
HIGH
Network |
samba redhat archlinux gentoo nixos novell tritondatacenter almalinux |
rsync discovery openshift_container_platform enterprise_linux enterprise_linux_eus enterprise_linux_for_arm_64 enterprise_linux_for_arm_64_eus enterprise_linux_for_ibm_z_systems<… |
Se encontró un fallo en rsync. Al usar la opción `--safe-links`, rsync no verifica correctamente si un destino de enlace simbólico contiene otro enlace simbólico dentro de él. Esto genera una vulnera… Update |
CWE-22
Path Traversal |
CVE-2024-12088 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 57 | 7.5 |
HIGH
Network |
samba almalinux archlinux gentoo nixos suse tritondatacenter redhat |
rsync almalinux arch_linux linux nixos suse_linux smartos enterprise_linux enterprise_linux_eus enterprise_linux_for_arm_64 enterprise_linux_for_arm_64_eus enterprise… |
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even … Update |
CWE-22
Path Traversal |
CVE-2024-12087 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 58 | 7.5 |
HIGH
Network |
samba almalinux archlinux gentoo nixos suse tritondatacenter redhat |
rsync almalinux arch_linux linux nixos suse_linux smartos enterprise_linux enterprise_linux_eus enterprise_linux_for_arm_64 enterprise_linux_for_arm_64_eus enterprise… |
Existe una vulnerabilidad Path Traversal en rsync. Se origina en un comportamiento habilitado por la opción `--inc-recursive`, una opción habilitada de manera predeterminada para muchas opciones de c… Update |
CWE-22
Path Traversal |
CVE-2024-12087 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 59 | 6.8 |
MEDIUM
Network |
samba redhat almalinux archlinux gentoo nixos suse tritondatacenter |
rsync openshift_container_platform enterprise_linux almalinux arch_linux linux nixos suse_linux smartos |
A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. D… Update |
CWE-390
Detection of Error Condition Without Action |
CVE-2024-12086 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |
| 60 | 6.8 |
MEDIUM
Network |
samba redhat almalinux archlinux gentoo nixos suse tritondatacenter |
rsync openshift_container_platform enterprise_linux almalinux arch_linux linux nixos suse_linux smartos |
Se encontró un fallo en rsync que podría permitir que un servidor enumere el contenido de un archivo arbitrario de la máquina del cliente. Este problema ocurre cuando se copian archivos de un cliente… Update |
CWE-390
Detection of Error Condition Without Action |
CVE-2024-12086 | 2026-04-15 07:16 | 2025-01-15 | Show | GitHub Exploit DB Packet Storm |