Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2051	7.5	重要 Network	Sick	Media Server	SickのMedia Serverにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2025-49183	2026-02-2 19:25	2025-06-12	Show	GitHub Exploit DB Packet Storm

2052	7.5	重要 Network	Sick	Package Analytics Baggage Analytics Logistics Diagnostic Analytics Field Analytics Enterprise Analytics Tire Analytics	SickのBaggage Analytics等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2025-49184	2026-02-2 19:25	2025-06-12	Show	GitHub Exploit DB Packet Storm

2053	5.4	警告 Network	Sick	Field Analytics	SickのField Analyticsにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-49185	2026-02-2 19:25	2025-06-12	Show	GitHub Exploit DB Packet Storm

2054	5.3	警告 Network	Sick	Field Analytics	SickのField Analyticsにおけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性	CWE-204 リクエストに対するレスポンス内容の違いに起因する情報漏えい	CVE-2025-49187	2026-02-2 19:25	2025-06-12	Show	GitHub Exploit DB Packet Storm

2055	7.5	重要 Network	Sick	Field Analytics	SickのField AnalyticsにおけるGET リクエストにおけるクエリ文字列からの情報漏えいに関する脆弱性	CWE-598 GET リクエストにおけるクエリ文字列からの情報漏えい	CVE-2025-49188	2026-02-2 19:25	2025-06-12	Show	GitHub Exploit DB Packet Storm

2056	5.8	警告 Network	Sick	Field Analytics	SickのField Analyticsにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2025-49190	2026-02-2 19:25	2025-06-12	Show	GitHub Exploit DB Packet Storm

2057	6.1	警告 Network	Sick	Field Analytics	SickのField Analyticsにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2025-49191	2026-02-2 19:25	2025-06-12	Show	GitHub Exploit DB Packet Storm

2058	7.1	重要 Local	サムスン	exynos 2400 ファームウェア Exynos 2500 ファームウェア exynos 1380 ファームウェア Exynos 1580 ファームウェア exynos 1330 ファームウェア exynos 1480 ファームウェア	サムスンのexynos 1330 ファームウェア等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2025-52519	2026-02-2 19:25	2026-01-5	Show	GitHub Exploit DB Packet Storm

2059	9.8	緊急 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおけるHTTP ヘッダのスクリプト構文の不適切な無効化に関する脆弱性	CWE-644 HTTP ヘッダのスクリプト構文の不適切な無効化	CVE-2025-52660	2026-02-2 19:25	2026-01-19	Show	GitHub Exploit DB Packet Storm

2060	6.1	警告 Network	MedDream	PACS Server	MedDream UABのPACS Serverにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-53516	2026-02-2 19:25	2026-01-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
171	6.5	MEDIUM Network	-	-	Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Frontend: from n/a through 4.3.1. New	CWE-862 Missing Authorization	CVE-2026-42412	2026-04-29 18:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

172	-		-	-	SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadequate validation and… New	CWE-89 SQL Injection	CVE-2026-3325	2026-04-29 18:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

173	6.1	MEDIUM Network	-	-	The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding. This allows for the injection of malicious Java… New	CWE-79 Cross-site Scripting	CVE-2025-10503	2026-04-29 18:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

174	7.3	HIGH Network	-	-	Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms Pro: from n/a through 2.8.… New	CWE-862 Missing Authorization	CVE-2026-42377	2026-04-29 17:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

175	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New	-	CVE-2026-40556	2026-04-29 17:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

176	9.6	CRITICAL Network	-	-	Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, and Firefox ESR 140.10.1. New	CWE-120 Classic Buffer Overflow	CVE-2026-7321	2026-04-29 15:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

177	7.1	HIGH Network	-	-	Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privilege… New	CWE-522 Insufficiently Protected Credentials	CVE-2026-35155	2026-04-29 14:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

178	-		-	-	Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application. New	-	CVE-2026-21023	2026-04-29 14:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

179	7.2	HIGH Network	-	-	GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring. New	CWE-79 Cross-site Scripting	CVE-2026-42615	2026-04-29 13:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

180	4.3	MEDIUM Network	-	-	Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vu… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-23773	2026-04-29 13:16	2026-04-29	Show	GitHub Exploit DB Packet Storm