Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210541 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 および 7 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-6366 2014-12-12 10:56 2014-12-9 Show GitHub Exploit DB Packet Storm
210542 4.3 警告 マイクロソフト - Microsoft Internet Explorer 8 から 11 における XSS フィルタを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6365 2014-12-12 10:56 2014-12-9 Show GitHub Exploit DB Packet Storm
210543 9.3 危険 マイクロソフト - Microsoft Internet Explorer 11 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-6329 2014-12-12 10:56 2014-12-9 Show GitHub Exploit DB Packet Storm
210544 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-6330 2014-12-12 10:56 2014-12-9 Show GitHub Exploit DB Packet Storm
210545 5 警告 マイクロソフト - Microsoft Internet Explorer 8 から 11 における XSS フィルタを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6328 2014-12-12 10:56 2014-12-9 Show GitHub Exploit DB Packet Storm
210546 9.3 危険 マイクロソフト - Microsoft Internet Explorer 11 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6327 2014-12-12 10:56 2014-12-9 Show GitHub Exploit DB Packet Storm
210547 4.3 警告 YOURLS - YOURLS の管理者パネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8488 2014-12-11 17:51 2014-10-25 Show GitHub Exploit DB Packet Storm
210548 5 警告 Apache Software Foundation - Apache CloudStack における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-7807 2014-12-11 16:44 2014-12-8 Show GitHub Exploit DB Packet Storm
210549 10 危険 DIGICOM - Digicom DG-5514T ADSL ルータのファームウェアにおける管理者権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-8496 2014-12-11 15:36 2014-11-8 Show GitHub Exploit DB Packet Storm
210550 4.3 警告 Scalix.com - Scalix Web Access のメール管理ログインパネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9352 2014-12-11 15:29 2014-10-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
731 6.8 MEDIUM
Network 		- - Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit.  This vulnerability … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-31991 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
732 4.3 MEDIUM
Network 		- - The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 seq… CWE-20
 Improper Input Validation  		CVE-2026-6231 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
733 6.5 MEDIUM
Adjacent 		- - A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE. An attacker with access to IEC 61850 networks cou… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2025-3756 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
734 - - - Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-u… CWE-416
CWE-787
 Use After Free
 Out-of-bounds Write 		CVE-2026-6100 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
735 - - - Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the … CWE-77
Command Injection 		CVE-2026-4786 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
736 7.5 HIGH
Network 		- - Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in tim… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-5086 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
737 6.1 MEDIUM
Network 		- - Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL, that if accessed … CWE-79
Cross-site Scripting 		CVE-2026-0512 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
738 4.2 MEDIUM
Network 		- - Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauth… CWE-539
 Use of Persistent Cookies Containing Sensitive Information 		CVE-2026-24318 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
739 4.3 MEDIUM
Network 		- - The Material Master application does not enforce authorization checks for authenticated users when executing reports, resulting in the disclosure of sensitive information. This vulnerability has a lo… CWE-862
 Missing Authorization 		CVE-2026-27672 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm
740 4.9 MEDIUM
Network 		- - Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operation… CWE-862
 Missing Authorization 		CVE-2026-27673 2026-04-18 00:18 2026-04-14 Show GitHub Exploit DB Packet Storm