Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224111 7.5 危険 slimcms - SlimCMS の edit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5491 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
224112 7.5 危険 phpstore - PHPStore Yahoo Answers の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5490 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
224113 4.3 警告 turnkeyforms - TurnkeyForms Text Link Sales の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5487 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
224114 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5486 2012-12-20 18:52 2008-12-12 Show GitHub Exploit DB Packet Storm
224115 4.3 警告 PunBB - PunBB の moderate.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5435 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
224116 6.5 警告 PunBB - PunBB における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5434 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
224117 4.3 警告 PunBB - PunBB の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5433 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
224118 4.3 警告 シマンテック - Norton Internet Security の Norton Antivirus におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5427 2012-12-20 18:52 2008-12-11 Show GitHub Exploit DB Packet Storm
224119 4.3 警告 サン・マイクロシステムズ - Sun Sun Ray Server Software などにおける Sun Ray 管理者パスワードを特定される脆弱性 CWE-200
情報漏えい 		CVE-2008-5423 2012-12-20 18:52 2008-12-4 Show GitHub Exploit DB Packet Storm
224120 7.5 危険 サン・マイクロシステムズ - Sun Sun Ray Server Software における Sun Ray 管理者パスワードを特定される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5422 2012-12-20 18:52 2008-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 4.3 MEDIUM
Network 		microsoft edge_chromium Microsoft Edge (Chromium-based) Spoofing Vulnerability CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-33118 2026-04-17 01:34 2026-04-11 Show GitHub Exploit DB Packet Storm
1142 9.8 CRITICAL
Network 		mesa3d mesa In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca. CWE-787
 Out-of-bounds Write 		CVE-2026-40393 2026-04-17 01:17 2026-04-13 Show GitHub Exploit DB Packet Storm
1143 7.8 HIGH
Local 		adobe indesign InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory st… CWE-125
Out-of-bounds Read 		CVE-2026-27284 2026-04-17 00:35 2026-04-15 Show GitHub Exploit DB Packet Storm
1144 7.8 HIGH
Local 		adobe indesign InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of thi… CWE-416
 Use After Free 		CVE-2026-27283 2026-04-17 00:35 2026-04-15 Show GitHub Exploit DB Packet Storm
1145 7.8 HIGH
Local 		adobe indesign InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… CWE-122
Heap-based Buffer Overflow 		CVE-2026-27238 2026-04-17 00:35 2026-04-15 Show GitHub Exploit DB Packet Storm
1146 5.5 MEDIUM
Local 		adobe indesign InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disc… CWE-122
Heap-based Buffer Overflow 		CVE-2026-27286 2026-04-17 00:33 2026-04-15 Show GitHub Exploit DB Packet Storm
1147 5.5 MEDIUM
Local 		adobe indesign InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerab… CWE-122
Heap-based Buffer Overflow 		CVE-2026-27285 2026-04-17 00:32 2026-04-15 Show GitHub Exploit DB Packet Storm
1148 4.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyRewards: from n/a through <=… CWE-862
 Missing Authorization 		CVE-2026-40786 2026-04-17 00:17 2026-04-15 Show GitHub Exploit DB Packet Storm
1149 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: … CWE-862
 Missing Authorization 		CVE-2026-40778 2026-04-17 00:17 2026-04-15 Show GitHub Exploit DB Packet Storm
1150 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elemento… CWE-862
 Missing Authorization 		CVE-2026-40763 2026-04-17 00:17 2026-04-15 Show GitHub Exploit DB Packet Storm