Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230611 6.5 警告 marcin manek - d.net CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3514 2012-09-25 17:38 2009-10-1 Show GitHub Exploit DB Packet Storm
230612 7.5 危険 jean-michel wyttenbach - CMSphp の modules.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3507 2012-09-25 17:38 2009-10-1 Show GitHub Exploit DB Packet Storm
230613 4.3 警告 jean-michel wyttenbach - CMSphp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3506 2012-09-25 17:38 2009-10-1 Show GitHub Exploit DB Packet Storm
230614 6.8 警告 hbcms - HBcms の php/update_article_hits.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3498 2012-09-25 17:38 2009-09-30 Show GitHub Exploit DB Packet Storm
230615 7.5 危険 kinfusion - Joomla! 用の Kinfusion SportFusion コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3491 2012-09-25 17:38 2009-09-30 Show GitHub Exploit DB Packet Storm
230616 3.5 注意 ジュニパーネットワークス - Juniper JUNOS の J-Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3487 2012-09-25 17:38 2009-09-30 Show GitHub Exploit DB Packet Storm
230617 3.5 注意 ジュニパーネットワークス - Juniper JUNOS の J-Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3486 2012-09-25 17:38 2009-09-30 Show GitHub Exploit DB Packet Storm
230618 4.3 警告 ジュニパーネットワークス - Juniper JUNOS の J-Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3485 2012-09-25 17:38 2009-09-30 Show GitHub Exploit DB Packet Storm
230619 7.5 危険 isygen - Joomla! 用の icrmbasic コンポーネントの特定のインターフェースにおける脆弱性 CWE-287
不適切な認証 		CVE-2009-3481 2012-09-25 17:38 2009-09-30 Show GitHub Exploit DB Packet Storm
230620 7.5 危険 isygen - Joomla! 用の icrmbasic コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3480 2012-09-25 17:38 2009-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 - - - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() smb_grant_oplock() has two issues in the oplock publication sequen… New - CVE-2026-31444 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
582 - - - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed context One major usage of damon_call() is online DAMON parameters update. It … New - CVE-2026-31445 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
583 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with s_first_data_block != 0 bigalloc with s_first_data_block != 0 is not supported, reject mounti… New - CVE-2026-31447 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
584 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON() with proper error handling when inline… New - CVE-2026-31451 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
585 - - - In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaild_push_item() calls iop_push(), the log item may have been fr… New - CVE-2026-31453 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
586 - - - In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfs_inode_item_push() and xfs_qm_dquot_logitem_push(), the AIL l… New - CVE-2026-31454 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
587 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in update_super_work when racing with umount Commit b98535d09179 ("ext4: fix bug_on in start_this_handle… New - CVE-2026-31446 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
588 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping logical blocks to physical blocks, if in… New - CVE-2026-31448 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
589 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_indexes ext4_ext_correct_indexes() walks up the extent tree correcting index entr… New - CVE-2026-31449 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm
590 - - - In the Linux kernel, the following vulnerability has been resolved: ext4: publish jinode after initialization ext4_inode_attach_jinode() publishes ei->jinode to concurrent users. It used to set ei-… New - CVE-2026-31450 2026-04-24 01:17 2026-04-22 Show GitHub Exploit DB Packet Storm