Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224121 9.3 危険 The Tor Project - Tor における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5398 2012-12-20 18:52 2008-12-8 Show GitHub Exploit DB Packet Storm
224122 7.2 危険 The Tor Project - Tor における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5397 2012-12-20 18:52 2008-12-8 Show GitHub Exploit DB Packet Storm
224123 10 危険 privacy-cd - UPR-Kernel の UPR における分離メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5393 2012-12-20 18:52 2008-12-8 Show GitHub Exploit DB Packet Storm
224124 6.9 警告 PvPGN - pvpgn の pvpgn-support-installer における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5370 2012-12-20 18:52 2008-08-11 Show GitHub Exploit DB Packet Storm
224125 6.8 警告 PHP-Fusion - PHP-Fusion の messages.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5335 2012-12-20 18:52 2008-12-4 Show GitHub Exploit DB Packet Storm
224126 10 危険 pie - Pie における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5332 2012-12-20 18:52 2008-12-4 Show GitHub Exploit DB Packet Storm
224127 7.5 危険 xoops hocasi - XOOPS 用の GesGaleri モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5321 2012-12-20 18:52 2008-12-3 Show GitHub Exploit DB Packet Storm
224128 5 警告 Tiki Software Community Association - Tikiwiki における脆弱性 CWE-noinfo
情報不足 		CVE-2008-5319 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
224129 5 警告 Tiki Software Community Association - Tikiwiki における脆弱性 CWE-noinfo
情報不足 		CVE-2008-5318 2012-12-20 18:52 2008-10-17 Show GitHub Exploit DB Packet Storm
224130 7.5 危険 pilotgroup - PG Roommate Finder Solution の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5307 2012-12-20 18:52 2008-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1751 9.0 CRITICAL
Network 		ci4-cms-erp ci4ms CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to prope… CWE-79
Cross-site Scripting 		CVE-2026-34559 2026-04-14 03:02 2026-04-2 Show GitHub Exploit DB Packet Storm
1752 9.0 CRITICAL
Network 		ci4-cms-erp ci4ms CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application renders user-c… CWE-79
Cross-site Scripting 		CVE-2026-34560 2026-04-14 03:00 2026-04-2 Show GitHub Exploit DB Packet Storm
1753 9.6 CRITICAL
Network 		google chrome Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a craf… CWE-416
 Use After Free 		CVE-2026-5874 2026-04-14 02:57 2026-04-9 Show GitHub Exploit DB Packet Storm
1754 8.4 HIGH
Network 		ci4-cms-erp ci4ms CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to prope… CWE-79
Cross-site Scripting 		CVE-2026-34561 2026-04-14 02:56 2026-04-2 Show GitHub Exploit DB Packet Storm
1755 4.3 MEDIUM
Network 		google chrome Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-5875 2026-04-14 02:55 2026-04-9 Show GitHub Exploit DB Packet Storm
1756 7.5 HIGH
Network 		roundcube webmail An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsafe deserialization in the redis/memcache session handler may lead to arbitrary file write operations by unauthenticated atta… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-35537 2026-04-14 02:54 2026-04-3 Show GitHub Exploit DB Packet Storm
1757 7.5 HIGH
Network 		apple swift-crypto A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure depending on runtime … CWE-125
Out-of-bounds Read 		CVE-2026-28815 2026-04-14 02:50 2026-04-3 Show GitHub Exploit DB Packet Storm
1758 7.5 HIGH
Network 		nimiq core-rs-albatross nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, the discovery handler accepts a peer-controll… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-33184 2026-04-14 02:47 2026-04-4 Show GitHub Exploit DB Packet Storm
1759 5.9 MEDIUM
Network 		jupyter lti_jupyterhub_authenticator LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are… CWE-401
CWE-770
 Missing Release of Memory after Effective Lifetime
 Allocation of Resources Without Limits or Throttling 		CVE-2026-34052 2026-04-14 02:44 2026-04-4 Show GitHub Exploit DB Packet Storm
1760 6.5 MEDIUM
Network 		nimiq core-rs-albatross nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, an elected validator proposer can send an ele… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-34061 2026-04-14 02:41 2026-04-4 Show GitHub Exploit DB Packet Storm