Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208381 4.9 警告 Linux - Linux Kernel の kernel/trace/trace_syscalls.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-7825 2015-05-12 17:40 2014-10-31 Show GitHub Exploit DB Packet Storm
208382 4.6 警告 Linux - Linux Kernel の kernel/trace/trace_syscalls.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-7826 2015-05-12 17:38 2014-10-31 Show GitHub Exploit DB Packet Storm
208383 4.9 警告 Linux - Linux Kernel の fs/ext4/file.c 内の ext4_file_write_iter 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2014-8086 2015-05-12 17:37 2014-10-10 Show GitHub Exploit DB Packet Storm
208384 5 警告 Stuart Caie - libmspack の qtmd_decompress 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-9556 2015-05-12 17:33 2014-12-30 Show GitHub Exploit DB Packet Storm
208385 4 警告 Linux
レッドハット		 - Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2014-3940 2015-05-12 17:29 2014-03-18 Show GitHub Exploit DB Packet Storm
208386 5 警告 Andreas Gohr - DokuWiki の inc/template.php における任意の画像にアクセスされる脆弱性 CWE-200
情報漏えい 		CVE-2014-8761 2015-05-12 17:29 2014-06-25 Show GitHub Exploit DB Packet Storm
208387 6.4 警告 FreeType Project - FreeType の base/ftmac.c 内の parse_fond 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-9672 2015-05-12 17:27 2014-11-26 Show GitHub Exploit DB Packet Storm
208388 5 警告 Linux - Linux Kernel の net/mac80211/tx.c 内の ieee80211_fragment 関数における重要な平文情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-8709 2015-05-12 17:26 2014-02-22 Show GitHub Exploit DB Packet Storm
208389 7.5 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の WebRTC の実装における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2014-8641 2015-05-12 17:25 2014-11-6 Show GitHub Exploit DB Packet Storm
208390 7.5 危険 FreeType Project - FreeType の sfnt/ttload.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-9667 2015-05-12 17:24 2014-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 - - - Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or Jav… New CWE-79
Cross-site Scripting 		CVE-2026-40230 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
62 - - - Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered une… New CWE-79
Cross-site Scripting 		CVE-2026-40229 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
63 - - - If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different tha… New CWE-22
Path Traversal 		CVE-2026-3087 2026-04-30 01:16 2026-04-28 Show GitHub Exploit DB Packet Storm
64 - - - Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads d… New - CVE-2026-38993 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
65 - - - Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially crafted filename bypasses an extension filter. This allows an au… New - CVE-2026-38991 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
66 - - - Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to properly sanitize user i… New - CVE-2026-38949 2026-04-30 01:16 2026-04-29 Show GitHub Exploit DB Packet Storm
67 6.1 MEDIUM
Network 		- - A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the uns… New CWE-79
Cross-site Scripting 		CVE-2026-37750 2026-04-30 01:16 2026-04-29 Show GitHub Exploit DB Packet Storm
68 - - - An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When … New - CVE-2026-37555 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
69 7.5 HIGH
Network 		- - TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function. New CWE-121
Stack-based Buffer Overflow 		CVE-2026-36837 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
70 - - - An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests. New - CVE-2026-30769 2026-04-30 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm