Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220071 1.2 注意 日立 - JP1/秘文 Advanced Edition Information Cypher における秘文フォーマットされたリムーバブルメディアを参照される脆弱性 CWE-noinfo
情報不足 		- 2013-06-19 17:52 2013-06-17 Show GitHub Exploit DB Packet Storm
220072 7.2 危険 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品の Mozilla Maintenance Service におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0799 2013-06-19 16:18 2013-04-2 Show GitHub Exploit DB Packet Storm
220073 6.9 警告 Mozilla Foundation - 複数の Mozilla 製品の Mozilla アップデータにおける権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-0797 2013-06-19 16:16 2013-04-2 Show GitHub Exploit DB Packet Storm
220074 5 警告 Mozilla Foundation - 複数の Mozilla 製品で使用される NSS におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0791 2013-06-19 15:47 2013-04-2 Show GitHub Exploit DB Packet Storm
220075 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の editor/libeditor/base/nsEditor.cpp における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0787 2013-06-19 15:36 2013-03-7 Show GitHub Exploit DB Packet Storm
220076 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-0783 2013-06-19 15:31 2013-02-19 Show GitHub Exploit DB Packet Storm
220077 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0782 2013-06-19 15:18 2013-02-19 Show GitHub Exploit DB Packet Storm
220078 5.4 警告 シスコシステムズ - Cisco ASA CX Context-Aware Security ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1203 2013-06-19 14:32 2013-06-17 Show GitHub Exploit DB Packet Storm
220079 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0780 2013-06-19 11:55 2013-02-19 Show GitHub Exploit DB Packet Storm
220080 4 警告 Mozilla Foundation - 複数の Mozilla 製品におけるアドレスバーを偽造される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0776 2013-06-19 11:10 2013-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
371 9.8 CRITICAL
Network 		- - An issue in Ntfy ntfy.sh before v.2.21 allows a remote attacker to execute arbitrary code via the parseActions function New CWE-94
Code Injection 		CVE-2026-39087 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
372 9.9 CRITICAL
Network 		- - A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via the documentation upload facility were served as-is on the … New CWE-79
Cross-site Scripting 		CVE-2026-40470 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
373 9.6 CRITICAL
Network 		- - hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to uplo… New CWE-352
 Origin Validation Error 		CVE-2026-40471 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
374 9.9 CRITICAL
Network 		- - In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting (XSS) attacks. New CWE-79
Cross-site Scripting 		CVE-2026-40472 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
375 - - - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when function-based ADD_TA… New CWE-79
CWE-183
Cross-site Scripting
 Permissive List of Allowed Inputs 		CVE-2026-41240 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
376 9.8 CRITICAL
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMinAlive parameter to /cgi-bin/cstecgi.cgi. New CWE-78
OS Command  		CVE-2026-31177 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
377 9.8 CRITICAL
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunMaxAlive parameter to /cgi-bin/cstecgi.cgi. New CWE-78
OS Command  		CVE-2026-31178 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
378 6.5 MEDIUM
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunPort parameter to /cgi-bin/cstecgi.cgi. New CWE-77
Command Injection 		CVE-2026-31179 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
379 9.8 CRITICAL
Network 		- - An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stunServerAddr parameter to /cgi-bin/cstecgi.cgi. New CWE-78
OS Command  		CVE-2026-31181 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
380 5.3 MEDIUM
Adjacent 		- - OpenTelemetry dotnet is a dotnet telemetry framework. From 1.13.1 to before 1.15.2, When exporting telemetry over gRPC using the OpenTelemetry Protocol (OTLP), the exporter may parse a server-provide… New CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-40891 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm