Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223621 5 警告 unica - Unica Affinium Campaign のリスナーサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7094 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223622 6.8 警告 unica - Unica Affinium Campaign におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7093 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223623 4.3 警告 unica - Unica Affinium Campaign におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7092 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223624 7.5 危険 Pligg - Pligg における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7091 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223625 7.8 危険 Pligg - Pligg におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7090 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223626 4.3 警告 Pligg - Pligg におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7089 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223627 7.5 危険 thehockeystop - TheHockeyStop HockeySTATS Online における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7085 2012-12-20 19:10 2009-08-26 Show GitHub Exploit DB Packet Storm
223628 7.5 危険 revou - ReVou Micro Blogging Twitter クローンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7083 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
223629 4.3 警告 Simple Machines
phpraider		 - Simple Machines phpRaider の不特定のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7035 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
223630 7.5 危険 tigran abrahamyan - PHPEcho CMS の kernel/smarty/Smarty.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7034 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1701 7.1 HIGH
Local 		- - The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves… - CVE-2026-27144 2026-04-14 04:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1702 9.8 CRITICAL
Network 		- - Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading … - CVE-2026-27143 2026-04-14 04:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1703 6.5 MEDIUM
Network 		payloadcms payload Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/storage-azure, @payloadcms/storage-gcs, @payloadcms/storage-r2, and @payloadcms/storage-s3… CWE-22
Path Traversal 		CVE-2026-34750 2026-04-14 04:15 2026-04-2 Show GitHub Exploit DB Packet Storm
1704 5.4 MEDIUM
Network 		payloadcms payload Payload is a free and open source headless content management system. Prior to version 3.79.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the authentication flow. Under certain condi… CWE-352
 Origin Validation Error 		CVE-2026-34749 2026-04-14 04:13 2026-04-2 Show GitHub Exploit DB Packet Storm
1705 8.7 HIGH
Network 		payloadcms payload Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/next, a stored Cross-Site Scripting (XSS) vulnerability existed in the admin panel. An aut… CWE-79
Cross-site Scripting 		CVE-2026-34748 2026-04-14 04:13 2026-04-2 Show GitHub Exploit DB Packet Storm
1706 7.8 HIGH
Local 		microsoft office
visual_basic_for_applications
visual_basic_for_applications_sdk 		Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic… NVD-CWE-Other
CWE-426
 Untrusted Search Path 		CVE-2012-1854 2026-04-14 04:00 2012-07-11 Show GitHub Exploit DB Packet Storm
1707 7.8 HIGH
Local 		microsoft office
visual_basic_for_applications
visual_basic_for_applications_sdk 		Vulnerabilidad de búsqueda de ruta no confiable ("Untrusted search path") en VBE6.dll en Microsoft Office 2003 SP3, 2007 SP2 y SP3, y 2010 Gold y SP1; Microsoft Visual Basic para Applications (VBA)… NVD-CWE-Other
CWE-426
 Untrusted Search Path 		CVE-2012-1854 2026-04-14 04:00 2012-07-11 Show GitHub Exploit DB Packet Storm
1708 8.2 HIGH
Network 		payloadcms payload Payload is a free and open source headless content management system. Prior to version 3.79.1, certain request inputs were not properly validated. An attacker could craft requests that influence SQL … CWE-89
SQL Injection 		CVE-2026-34747 2026-04-14 03:53 2026-04-2 Show GitHub Exploit DB Packet Storm
1709 7.7 HIGH
Network 		payloadcms payload Payload is a free and open source headless content management system. Prior to version 3.79.1, an authenticated Server-Side Request Forgery (SSRF) vulnerability exists in the upload functionality. Au… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-34746 2026-04-14 03:52 2026-04-2 Show GitHub Exploit DB Packet Storm
1710 9.8 CRITICAL
Network 		hackerbay oneuptime OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow execution endpoints (GET /workflow/manual/run/:workflowId … CWE-306
Missing Authentication for Critical Function 		CVE-2026-35053 2026-04-14 03:46 2026-04-3 Show GitHub Exploit DB Packet Storm