Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2091 6.1 警告
Network 		MedDream PACS Server MedDream UABのPACS Serverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-58094 2026-02-2 19:24 2026-01-20 Show GitHub Exploit DB Packet Storm
2092 6.1 警告
Network 		MedDream PACS Server MedDream UABのPACS Serverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-58095 2026-02-2 19:24 2026-01-20 Show GitHub Exploit DB Packet Storm
2093 5.3 警告
Network 		The Go Project Go The Go ProjectのGoにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-58185 2026-02-2 19:24 2025-10-29 Show GitHub Exploit DB Packet Storm
2094 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおけるアルゴリズムの複雑さに関する脆弱性 CWE-407
アルゴリズムの複雑性 		CVE-2025-58187 2026-02-2 19:24 2025-10-29 Show GitHub Exploit DB Packet Storm
2095 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2025-58188 2026-02-2 19:24 2025-10-29 Show GitHub Exploit DB Packet Storm
2096 5.3 警告
Network 		The Go Project Go The Go ProjectのGoにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2025-58189 2026-02-2 19:24 2025-10-29 Show GitHub Exploit DB Packet Storm
2097 3.5 低
Physics 		Imagination Technologies Limited GPU DDK Imagination Technologies LimitedのGPU DDKにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2025-58409 2026-02-2 19:24 2026-01-13 Show GitHub Exploit DB Packet Storm
2098 8.8 重要
Local 		Imagination Technologies Limited GPU DDK Imagination Technologies LimitedのGPU DDKにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2025-58411 2026-02-2 19:23 2026-01-13 Show GitHub Exploit DB Packet Storm
2099 7.5 重要
Network 		EMQX nanomq EMQXのnanomqにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2025-59946 2026-02-2 19:23 2025-12-27 Show GitHub Exploit DB Packet Storm
2100 9 緊急
Network 		EMQX nanomq EMQXのnanomqにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2025-59947 2026-02-2 19:23 2025-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
101 7.5 HIGH
Network 		bacnetstack bacnet_stack BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service property decoder… Update CWE-125
Out-of-bounds Read 		CVE-2026-41503 2026-04-29 00:30 2026-04-25 Show GitHub Exploit DB Packet Storm
102 - - - Memory safety bugs present in Firefox ESR 140.10.0, Thunderbird ESR 140.10.0, Firefox 150.0.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with… New - CVE-2026-7323 2026-04-29 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
103 - - - Memory safety bugs present in Firefox ESR 115.35.0, Firefox ESR 140.10.0, Thunderbird ESR 140.10.0, Firefox 150.0.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption an… New - CVE-2026-7322 2026-04-29 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
104 9.6 CRITICAL
Network 		- - Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox ESR 140.10.1. New CWE-120
Classic Buffer Overflow 		CVE-2026-7321 2026-04-29 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
105 8.8 HIGH
Network 		- - A vulnerability was found in D-Link DIR-825M 1.1.12. This issue affects the function sub_414BA8 of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url results in buffer o… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7289 2026-04-29 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
106 8.8 HIGH
Network 		- - A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads … New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7288 2026-04-29 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
107 4.7 MEDIUM
Network 		- - A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts the function save_expired of the file /ajax.php?action=save_expired. The manipulation of th… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7283 2026-04-29 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
108 4.7 MEDIUM
Network 		- - A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function delete_expired of the file /ajax.php?action=delete_expired. The manipulation of the… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7282 2026-04-29 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
109 7.3 HIGH
Network 		- - A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extract_to_json of the file src/entry.py. Performing a manipulation of the argument output_f… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7206 2026-04-29 00:16 2026-04-28 Show GitHub Exploit DB Packet Storm
110 7.5 HIGH
Network 		- - Text::Minify::XS versions from v0.3.0 before v0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, le… New CWE-122
CWE-176
Heap-based Buffer Overflow
 Improper Handling of Unicode Encoding 		CVE-2026-7040 2026-04-29 00:16 2026-04-27 Show GitHub Exploit DB Packet Storm