Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2091 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2025-39963 2026-02-5 15:46 2025-10-9 Show GitHub Exploit DB Packet Storm
2092 3.3 低
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-39964 2026-02-5 15:46 2025-10-13 Show GitHub Exploit DB Packet Storm
2093 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-39965 2026-02-5 15:46 2025-10-13 Show GitHub Exploit DB Packet Storm
2094 4.7 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2025-39966 2026-02-5 15:46 2025-10-15 Show GitHub Exploit DB Packet Storm
2095 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2025-39967 2026-02-5 15:46 2025-10-15 Show GitHub Exploit DB Packet Storm
2096 6.7 警告
Local 		デル secure connect gateway デルのsecure connect gatewayにおける不要な特権による実行に関する脆弱性 CWE-250
CWE-noinfo
CVE-2025-46696 2026-02-5 15:46 2026-01-6 Show GitHub Exploit DB Packet Storm
2097 8.6 重要
Network 		Sick Media Server SickのMedia Serverにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-49181 2026-02-5 15:46 2025-06-12 Show GitHub Exploit DB Packet Storm
2098 9.1 緊急
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおける代替名による認証回避に関する脆弱性 CWE-289
代替名による認証回避 		CVE-2025-55130 2026-02-5 15:46 2026-01-20 Show GitHub Exploit DB Packet Storm
2099 5.3 警告
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-55132 2026-02-5 15:46 2026-01-20 Show GitHub Exploit DB Packet Storm
2100 7.5 重要
Network 		OwnTone project OwnTone OwnTone projectのOwnToneにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-57155 2026-02-5 15:46 2026-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 7.3 HIGH
Network 		- - A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1. Affected by this issue is the function proxyHandler of the file app/api/[provider]/[...path]/route.ts. The manipulation re… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-7177 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
292 7.3 HIGH
Network 		- - A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1. This affects the function storeUrl of the file app/api/artifacts/route.ts of the component Artifacts Endpoint. This manipulatio… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-7178 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
293 5.3 MEDIUM
Local 		- - A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function read_null_terminated_string of the file src/binwalk/plugins/winceextract.py of the comp… New CWE-22
Path Traversal 		CVE-2026-7179 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
294 7.3 HIGH
Network 		- - A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=save_product. This manipulation of the argument… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7194 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
295 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql inject… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7196 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
296 7.3 HIGH
Network 		- - A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_product. Perform… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7199 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
297 4.3 MEDIUM
Network 		- - A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a manipulation of th… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7200 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
298 7.3 HIGH
Network 		- - A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the function search_papers of the file src/main.py. Such manipulation of the argumen… New CWE-22
Path Traversal 		CVE-2026-7205 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
299 7.3 HIGH
Network 		- - A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extract_to_json of the file src/entry.py. Performing a manipulation of the argument output_f… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7206 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm
300 7.3 HIGH
Network 		- - A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of the file mcp_server.py of the component Git Search API. Executing a manipulatio… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-7211 2026-04-29 10:00 2026-04-28 Show GitHub Exploit DB Packet Storm