Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200271 4.6 警告 アップル
Ruby-lang.org
- Apple OS X などの製品で配布される Ruby の ext/fiddle/handle.c の Fiddle::Handle の実装における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2015-7551 2016-03-28 15:24 2015-12-16 Show GitHub Exploit DB Packet Storm
200272 4.3 警告 アップル - Apple iOS および Apple OS X のカーネルにおける重要なメモリレイアウト情報を取得される脆弱性 CWE-119
CWE-200
CVE-2016-1758 2016-03-28 14:37 2016-03-21 Show GitHub Exploit DB Packet Storm
200273 9.3 危険 アップル - Apple iOS および Apple OS X のカーネルにおける特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-362
競合状態
CVE-2016-1757 2016-03-28 14:37 2016-03-21 Show GitHub Exploit DB Packet Storm
200274 9.3 危険 アップル - Apple iOS および Apple OS X のカーネルにおける特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-1756 2016-03-28 14:37 2016-03-21 Show GitHub Exploit DB Packet Storm
200275 5 警告 アップル - Apple OS X Server の Wiki サーバにおける Wiki ページから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-1787 2016-03-28 14:24 2016-03-21 Show GitHub Exploit DB Packet Storm
200276 5 警告 アップル - Apple OS X Server の Web サーバにおける暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2016-1777 2016-03-28 14:24 2016-03-21 Show GitHub Exploit DB Packet Storm
200277 5 警告 アップル - Apple OS X Server の Web サーバにおける重要な設定情報を取得される脆弱性 CWE-Other
その他
CVE-2016-1776 2016-03-28 14:24 2016-03-21 Show GitHub Exploit DB Packet Storm
200278 5 警告 アップル - Apple OS X Server の Server App の Time Machine サーバにおける重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2016-1774 2016-03-28 14:23 2016-03-21 Show GitHub Exploit DB Packet Storm
200279 9.3 危険 アップル - 複数の Apple 製品の TrueTypeScaler における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1775 2016-03-28 12:17 2016-03-21 Show GitHub Exploit DB Packet Storm
200280 9.3 危険 アップル - 複数の Apple 製品のカーネルにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2016-1753 2016-03-28 12:17 2016-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 - - - An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow ex… New CWE-77
Command Injection
CVE-2026-30898 2026-04-18 16:16 2026-04-18 Show GitHub Exploit DB Packet Storm
22 - - - Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly tr… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-25917 2026-04-18 16:16 2026-04-18 Show GitHub Exploit DB Packet Storm
23 6.9 MEDIUM
Local
- - In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains a malicious file whose name is valid output from the conduct… New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-41253 2026-04-18 15:16 2026-04-18 Show GitHub Exploit DB Packet Storm
24 8.8 HIGH
Network
- - The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload and remote code execution in all versions up to, and including, 4.1.16 via the `c… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-6518 2026-04-18 14:16 2026-04-18 Show GitHub Exploit DB Packet Storm
25 6.4 MEDIUM
Network
- - The Flipbox Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flipbox widget's button URL `custom_attributes` field in all versions up to, and including, 2… New CWE-79
Cross-site Scripting
CVE-2026-6048 2026-04-18 14:16 2026-04-18 Show GitHub Exploit DB Packet Storm
26 6.4 MEDIUM
Network
- - The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up to, and including, 3.1.16 due to insuffic… New CWE-79
Cross-site Scripting
CVE-2026-4801 2026-04-18 14:16 2026-04-18 Show GitHub Exploit DB Packet Storm
27 7.5 HIGH
Network
- - Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remot… New CWE-321
CWE-502
 Use of Hard-coded Cryptographic Key
 Deserialization of Untrusted Data
CVE-2026-5426 2026-04-18 13:16 2026-04-17 Show GitHub Exploit DB Packet Storm
28 7.5 HIGH
Network
- - libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document. New CWE-331
 Insufficient Entropy
CVE-2026-41080 2026-04-18 13:16 2026-04-17 Show GitHub Exploit DB Packet Storm
29 6.5 MEDIUM
Adjacent
- - An issue in the Bluetooth Low Energy (BLE) control interface of the Yamaha SR-B30A sound bar firmware 2.40 (Mobile App: Sound Bar Remote / version: 2.40) allows remote attackers within BLE radio rang… New CWE-284
Improper Access Control
CVE-2026-37100 2026-04-18 13:16 2026-04-17 Show GitHub Exploit DB Packet Storm
30 7.5 HIGH
Network
- - JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Users are advised to upgrade to Airflow version that contains fix. Users are recommended to upgrade t… New CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-31987 2026-04-18 13:16 2026-04-16 Show GitHub Exploit DB Packet Storm