Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224521	7.5	危険	quicksilver forums	-	Quicksilver Forums の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3601	2012-12-20 18:52	2008-08-12	Show	GitHub Exploit DB Packet Storm

224522	7.5	危険	psi-labs	-	psipuss における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3598	2012-12-20 18:52	2008-08-12	Show	GitHub Exploit DB Packet Storm

224523	5	警告	skulltag team	-	Skulltag におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3597	2012-12-20 18:52	2008-08-12	Show	GitHub Exploit DB Packet Storm

224524	9.3	危険	txtsql	-	txtSQL の examples/txtSQLAdmin/startup.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-3595	2012-12-20 18:52	2008-08-12	Show	GitHub Exploit DB Packet Storm

224525	7.5	危険	syzygycms	-	SyzygyCMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3593	2012-12-20 18:52	2008-08-11	Show	GitHub Exploit DB Packet Storm

224526	7.5	危険	phsblog	-	phsBlog における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3588	2012-12-20 18:52	2008-08-11	Show	GitHub Exploit DB Packet Storm

224527	7.5	危険	pozscripts	-	PozScripts GreenCart PHP Shopping Cart における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3585	2012-12-20 18:52	2008-08-11	Show	GitHub Exploit DB Packet Storm

224528	4.3	警告	qsoft	-	Qsoft K-Links の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3581	2012-12-20 18:52	2008-08-10	Show	GitHub Exploit DB Packet Storm

224529	7.5	危険	qsoft	-	Qsoft K-Links における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3580	2012-12-20 18:52	2008-08-10	Show	GitHub Exploit DB Packet Storm

224530	2.6	注意	Pluck CMS	-	Pluck におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3574	2012-12-20 18:52	2008-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2011	5.0	MEDIUM Network	sillytavern	sillytavern	SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-34526	2026-04-14 03:39	2026-04-3	Show	GitHub Exploit DB Packet Storm

2012	6.5	MEDIUM Network	python-poetry	poetry	Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths that Poetry writes to disk without containment checks, allowing arbitrary …	CWE-22 Path Traversal	CVE-2026-34591	2026-04-14 03:38	2026-04-3	Show	GitHub Exploit DB Packet Storm

2013	6.8	MEDIUM Physics	samsung	android	Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-21007	2026-04-14 03:38	2026-04-13	Show	GitHub Exploit DB Packet Storm

2014	2.4	LOW Physics	samsung	android	Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.	NVD-CWE-noinfo	CVE-2026-21006	2026-04-14 03:38	2026-04-13	Show	GitHub Exploit DB Packet Storm

2015	6.5	MEDIUM Adjacent	samsung	android	Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.	NVD-CWE-noinfo	CVE-2026-21008	2026-04-14 03:38	2026-04-13	Show	GitHub Exploit DB Packet Storm

2016	7.5	HIGH Network	ash-hq	ash_framework	Ash Framework is a declarative, extensible framework for building Elixir applications. Prior to version 3.22.0, Ash.Type.Module.cast_input/2 unconditionally creates a new Erlang atom via Module.conca…	CWE-400 CWE-770 Uncontrolled Resource Consumption Allocation of Resources Without Limits or Throttling	CVE-2026-34593	2026-04-14 03:37	2026-04-3	Show	GitHub Exploit DB Packet Storm

2017	5.3	MEDIUM Network	sillytavern	sillytavern	SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version…	CWE-22 Path Traversal	CVE-2026-34523	2026-04-14 03:35	2026-04-3	Show	GitHub Exploit DB Packet Storm

2018	8.1	HIGH Network	sillytavern	sillytavern	SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version…	CWE-22 CWE-73 Path Traversal External Control of File Name or Path	CVE-2026-34522	2026-04-14 03:34	2026-04-3	Show	GitHub Exploit DB Packet Storm

2019	9.8	CRITICAL Network	microsoft	bing	Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-32186	2026-04-14 03:32	2026-04-4	Show	GitHub Exploit DB Packet Storm

2020	9.8	CRITICAL Network	cloudreve	cloudreve	Cloudreve is a self-hosted file management and sharing system. Prior to version 4.13.0, the application uses the weak pseudo-random number generator math/rand seeded with time.Now().UnixNano() to gen…	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2026-25726	2026-04-14 03:31	2026-04-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed