Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224541	4.9	警告	サン・マイクロシステムズ	-	Sun Netra T5220 Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2008-3548	2012-12-20 18:52	2008-08-4	Show	GitHub Exploit DB Packet Storm

224542	4.7	警告	レッドハット	-	Fedora などの Linux 上で稼動している initscripts の rc.sysinit における任意のファイルを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2008-3524	2012-12-20 18:52	2008-09-25	Show	GitHub Exploit DB Packet Storm

224543	4.3	警告	レッドハット	-	Red Hat JBoss Enterprise Application Platform の JBossAs コンポーネントにおける重要な情報を取得される脆弱性	CWE-16 環境設定	CVE-2008-3519	2012-12-20 18:52	2008-09-22	Show	GitHub Exploit DB Packet Storm

224544	4.3	警告	softbiz	-	Softbiz Photo Gallery におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3511	2012-12-20 18:52	2008-08-7	Show	GitHub Exploit DB Packet Storm

224545	5	警告	wogan may	-	LiteNews における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3508	2012-12-20 18:52	2008-08-7	Show	GitHub Exploit DB Packet Storm

224546	7.5	危険	wogan may	-	LiteNews の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3507	2012-12-20 18:52	2008-08-7	Show	GitHub Exploit DB Packet Storm

224547	7.5	危険	polypager	-	PolyPager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3506	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

224548	4.3	警告	polypager	-	PolyPager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3505	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

224549	5	警告	webgui	-	Plain Black WebGUI の RSSFromParent における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2008-3503	2012-12-20 18:52	2008-06-20	Show	GitHub Exploit DB Packet Storm

224550	5	警告	RealVNC	-	RealVNC Windows Client の vncviewer.exe におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3493	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2011	5.0	MEDIUM Network	sillytavern	sillytavern	SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-34526	2026-04-14 03:39	2026-04-3	Show	GitHub Exploit DB Packet Storm

2012	6.5	MEDIUM Network	python-poetry	poetry	Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted wheel can contain ../ paths that Poetry writes to disk without containment checks, allowing arbitrary …	CWE-22 Path Traversal	CVE-2026-34591	2026-04-14 03:38	2026-04-3	Show	GitHub Exploit DB Packet Storm

2013	6.8	MEDIUM Physics	samsung	android	Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-21007	2026-04-14 03:38	2026-04-13	Show	GitHub Exploit DB Packet Storm

2014	2.4	LOW Physics	samsung	android	Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.	NVD-CWE-noinfo	CVE-2026-21006	2026-04-14 03:38	2026-04-13	Show	GitHub Exploit DB Packet Storm

2015	6.5	MEDIUM Adjacent	samsung	android	Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.	NVD-CWE-noinfo	CVE-2026-21008	2026-04-14 03:38	2026-04-13	Show	GitHub Exploit DB Packet Storm

2016	7.5	HIGH Network	ash-hq	ash_framework	Ash Framework is a declarative, extensible framework for building Elixir applications. Prior to version 3.22.0, Ash.Type.Module.cast_input/2 unconditionally creates a new Erlang atom via Module.conca…	CWE-400 CWE-770 Uncontrolled Resource Consumption Allocation of Resources Without Limits or Throttling	CVE-2026-34593	2026-04-14 03:37	2026-04-3	Show	GitHub Exploit DB Packet Storm

2017	5.3	MEDIUM Network	sillytavern	sillytavern	SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version…	CWE-22 Path Traversal	CVE-2026-34523	2026-04-14 03:35	2026-04-3	Show	GitHub Exploit DB Packet Storm

2018	8.1	HIGH Network	sillytavern	sillytavern	SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version…	CWE-22 CWE-73 Path Traversal External Control of File Name or Path	CVE-2026-34522	2026-04-14 03:34	2026-04-3	Show	GitHub Exploit DB Packet Storm

2019	9.8	CRITICAL Network	microsoft	bing	Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-32186	2026-04-14 03:32	2026-04-4	Show	GitHub Exploit DB Packet Storm

2020	9.8	CRITICAL Network	cloudreve	cloudreve	Cloudreve is a self-hosted file management and sharing system. Prior to version 4.13.0, the application uses the weak pseudo-random number generator math/rand seeded with time.Now().UnixNano() to gen…	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2026-25726	2026-04-14 03:31	2026-04-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed