Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229751 5 警告 linearcorp - Linear eMerge などにおける Video Recorder データを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-2469 2012-09-25 17:38 2010-06-25 Show GitHub Exploit DB Packet Storm
229752 10 危険 S2 Security
sonitrol
linearcorp		 - Linear eMerge などで使用される S2 Security NetBox における特権を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-2468 2012-09-25 17:38 2010-06-25 Show GitHub Exploit DB Packet Storm
229753 5 警告 S2 Security
sonitrol
linearcorp		 - Linear eMerge におけるバックアップファイルをダウンロードされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-2467 2012-09-25 17:38 2010-06-25 Show GitHub Exploit DB Packet Storm
229754 5 警告 S2 Security
sonitrol
linearcorp		 - Linear eMerge におけるバックアップファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2465 2012-09-25 17:38 2010-06-25 Show GitHub Exploit DB Packet Storm
229755 4.3 警告 The Jamroom Network - Jamroom の forum.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2463 2012-09-25 17:38 2010-06-22 Show GitHub Exploit DB Packet Storm
229756 7.5 危険 JCE-Tech.com - JCE-Tech Overstock の storecat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2461 2012-09-25 17:38 2010-06-25 Show GitHub Exploit DB Packet Storm
229757 7.5 危険 JCE-Tech.com - JCE-Tech SASS の merchant_product_list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2460 2012-09-25 17:38 2010-06-25 Show GitHub Exploit DB Packet Storm
229758 9.3 危険 kvirc - KVIrc の DCC 機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2452 2012-09-25 17:38 2010-06-29 Show GitHub Exploit DB Packet Storm
229759 10 危険 kvirc - KVIrc の DCC 機能におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2010-2451 2012-09-25 17:38 2010-06-29 Show GitHub Exploit DB Packet Storm
229760 4.3 警告 MaraDNS - MaraDNS の parse/Csv2_parse.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2444 2012-09-25 17:38 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 5.8 MEDIUM
Local 		- - In JetBrains Junie before 252.549.29 command execution was possible via malicious project file New CWE-77
Command Injection 		CVE-2026-41153 2026-04-18 00:38 2026-04-18 Show GitHub Exploit DB Packet Storm
412 7.5 HIGH
Network 		- - Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials. New CWE-284
Improper Access Control 		CVE-2026-30994 2026-04-18 00:37 2026-04-16 Show GitHub Exploit DB Packet Storm
413 8.6 HIGH
Network 		- - Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint. New CWE-89
SQL Injection 		CVE-2026-30995 2026-04-18 00:37 2026-04-16 Show GitHub Exploit DB Packet Storm
414 9.8 CRITICAL
Network 		- - Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php. This vulnerability is exploitable via a crafted input. New CWE-94
Code Injection 		CVE-2026-30993 2026-04-18 00:37 2026-04-16 Show GitHub Exploit DB Packet Storm
415 8.0 HIGH
Network 		- - Totara LMS v19.1.5 and before is vulnerable to HTLM Injection. An attacker can inject malicious HTLM code in a message and send it to all the users in the application, resulting in executing the code… Update CWE-79
Cross-site Scripting 		CVE-2026-31281 2026-04-18 00:35 2026-04-14 Show GitHub Exploit DB Packet Storm
416 9.8 CRITICAL
Network 		- - Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control. The login page code can be manipulated to reveal the login form. An attacker can chain that with missing rate-limit on the log… Update CWE-284
Improper Access Control 		CVE-2026-31282 2026-04-18 00:35 2026-04-14 Show GitHub Exploit DB Packet Storm
417 9.8 CRITICAL
Network 		- - In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-31283 2026-04-18 00:35 2026-04-14 Show GitHub Exploit DB Packet Storm
418 8.8 HIGH
Network 		- - A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `s… Update CWE-502
 Deserialization of Untrusted Data 		CVE-2026-1462 2026-04-18 00:34 2026-04-14 Show GitHub Exploit DB Packet Storm
419 6.2 MEDIUM
Local 		- - A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl file. Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-29628 2026-04-18 00:34 2026-04-14 Show GitHub Exploit DB Packet Storm
420 7.5 HIGH
Network 		- - An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. Update CWE-125
Out-of-bounds Read 		CVE-2026-30997 2026-04-18 00:34 2026-04-14 Show GitHub Exploit DB Packet Storm