Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2051 7.8 重要
Local 		ON Semiconductor QCS-AX2-S5 ファームウェア
QV942C ファームウェア
QCS-AX3-A12 ファームウェア
QCS-AX3-S5 ファームウェア
QHS710 ファームウェア
QSR10GA ファームウェア
QD840 ファームウェア
QCS-AX3-T8 ファームウェア 		ON SemiconductorのQCS-AX2-A12 ファームウェア等の複数製品における引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2025-3460 2026-01-23 14:19 2025-06-8 Show GitHub Exploit DB Packet Storm
2052 7.1 重要
Adjacent 		Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-36911 2026-01-23 14:19 2026-01-15 Show GitHub Exploit DB Packet Storm
2053 3.5 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2025-3950 2026-01-23 14:19 2026-01-9 Show GitHub Exploit DB Packet Storm
2054 9.8 緊急
Network 		ヒューレット・パッカード HP ThinPro ヒューレット・パッカードのHP ThinProにおける不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行 		CVE-2025-43017 2026-01-23 14:19 2025-10-28 Show GitHub Exploit DB Packet Storm
2055 4.3 警告
Network 		デル secure connect gateway デルのsecure connect gatewayにおける複数の脆弱性 CWE-22
CWE-23
CVE-2025-46363 2026-01-23 14:19 2025-10-30 Show GitHub Exploit DB Packet Storm
2056 5.3 警告
Network 		libsndfile project libsndfile libsndfile projectのlibsndfileにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2025-56226 2026-01-23 14:19 2026-01-14 Show GitHub Exploit DB Packet Storm
2057 6.5 警告
Network 		Mattermost, Inc. Mattermost Mobile Mattermost, Inc.のMattermost Mobileにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-59480 2026-01-23 14:19 2025-11-13 Show GitHub Exploit DB Packet Storm
2058 9.8 緊急
Network 		Apache Software Foundation brpc Apache Software Foundationのbrpcにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2025-60021 2026-01-23 14:19 2026-01-16 Show GitHub Exploit DB Packet Storm
2059 6.5 警告
Network 		E2pdf E2pdf WordPress用E2pdfにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-62068 2026-01-23 14:19 2025-10-22 Show GitHub Exploit DB Packet Storm
2060 6.7 警告
Local 		アクシスコミュニケーションズ AXIS OS アクシスコミュニケーションズのAXIS OSにおける指定されたタイプの入力に対する不適切な検証に関する脆弱性 CWE-1287
指定されたタイプの入力に対する不適切な検証 		CVE-2025-6298 2026-01-23 14:19 2025-11-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 5.3 MEDIUM
Network 		- - Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side filesystem path of the applicati… New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-41459 2026-04-25 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
72 8.8 HIGH
Adjacent 		- - arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-41429 2026-04-25 05:16 2026-04-25 Show GitHub Exploit DB Packet Storm
73 - - - Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.5, the clientPrivileges option documents a create action, but the OAuth client creation endpoints did not invok… New CWE-863
 Incorrect Authorization 		CVE-2026-41427 2026-04-25 05:16 2026-04-25 Show GitHub Exploit DB Packet Storm
74 6.1 MEDIUM
Network 		- - pretalx is a conference planning tool. Prior to 2026.1.0, an unauthenticated attacker can send arbitrary HTML-rendered emails from a pretalx instance's configured sender address by embedding malforme… New CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output 		CVE-2026-41426 2026-04-25 05:16 2026-04-25 Show GitHub Exploit DB Packet Storm
75 5.4 MEDIUM
Network 		- - Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.11, there is no CSRF protection on the cache feature in authlib.integrations.starlette_client.OAuth. This vuln… New CWE-352
 Origin Validation Error 		CVE-2026-41425 2026-04-25 05:16 2026-04-25 Show GitHub Exploit DB Packet Storm
76 9.8 CRITICAL
Network 		- - Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executable extensions .php4 due to an i… New CWE-184
 Incomplete Blacklist 		CVE-2026-34415 2026-04-25 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
77 7.1 HIGH
Network 		- - Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where the name parameter in re… New CWE-22
Path Traversal 		CVE-2026-34414 2026-04-25 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
78 8.6 HIGH
Network 		- - Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where an HTTP redirect to unaut… New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-34413 2026-04-25 05:16 2026-04-23 Show GitHub Exploit DB Packet Storm
79 8.2 HIGH
Network 		firebirdsql firebird Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCT_specific_data segments during authentication, the server assumes s… Update CWE-119
CWE-787
Incorrect Access of Indexable Resource ('Range Error') 
 Out-of-bounds Write 		CVE-2026-27890 2026-04-25 05:05 2026-04-18 Show GitHub Exploit DB Packet Storm
80 7.5 HIGH
Network 		firebirdsql firebird Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an op_slice network packet, the server passes an unprepared stru… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-28212 2026-04-25 04:54 2026-04-18 Show GitHub Exploit DB Packet Storm