Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230781 8.5 危険 ヒューレット・パッカード - HP StorageWorks 1/8 G2 Tape Autoloader におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2680 2012-09-25 17:27 2009-09-15 Show GitHub Exploit DB Packet Storm
230782 4 警告 ヒューレット・パッカード - HP NonStop 上の OSS Name Server における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-2678 2012-09-25 17:27 2009-11-10 Show GitHub Exploit DB Packet Storm
230783 6.8 警告 ヒューレット・パッカード - Linux の HP Insight Control Suite におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2677 2012-09-25 17:27 2009-08-12 Show GitHub Exploit DB Packet Storm
230784 7.8 危険 マイクロソフト - Microsoft Internet Explorer 6 および 7 におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-2668 2012-09-25 17:27 2009-08-5 Show GitHub Exploit DB Packet Storm
230785 10 危険 IBM - IBM TKLM における脆弱性 CWE-noinfo
情報不足 		CVE-2009-2667 2012-09-25 17:27 2009-08-5 Show GitHub Exploit DB Packet Storm
230786 6.8 警告 jun furuse - CamlImages における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2660 2012-09-25 17:27 2009-08-4 Show GitHub Exploit DB Packet Storm
230787 4.6 警告 nilf - nilfs-utils における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2657 2012-09-25 17:27 2009-06-11 Show GitHub Exploit DB Packet Storm
230788 4.3 警告 マイクロソフト - Microsoft Internet Explorer 7 および 8 の mshtml.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2655 2012-09-25 17:27 2009-08-3 Show GitHub Exploit DB Packet Storm
230789 5 警告 カスペルスキー - Kaspersky Anti-Virus などにおける Kaspersky アプリケーションを無効にされる脆弱性 CWE-noinfo
情報不足 		CVE-2009-2647 2012-09-25 17:27 2009-07-30 Show GitHub Exploit DB Packet Storm
230790 7.5 危険 interlogy - Interlogy Profile Manager Basic の cgi/admin.cgi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2640 2012-09-25 17:27 2009-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
421 9.8 CRITICAL
Network 		- - Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0.0.41 through 0.0.93 have a vulnerability in `LivekitFrameSerializer` – an opti… New CWE-502
 Deserialization of Untrusted Data 		CVE-2025-62373 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
422 9.8 CRITICAL
Network 		- - Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via the Ascent Capture Service that i… New CWE-306
CWE-441
Missing Authentication for Critical Function
Confused Deputy 		CVE-2026-23751 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
423 - - - This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code executi… New CWE-59
Link Following 		CVE-2026-33694 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
424 5.3 MEDIUM
Network 		- - OpenTelemetry dotnet is a dotnet telemetry framework. In OpenTelemetry.Api 0.5.0-beta.2 to 1.15.2 and OpenTelemetry.Extensions.Propagators 1.3.1 to 1.15.2, The implementation details of the baggage, … New CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-40894 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
425 5.9 MEDIUM
Network 		- - OpenTelemetry dotnet is a dotnet telemetry framework. In 1.6.0-rc.1 and earlier, OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on … New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41078 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
426 5.9 MEDIUM
Network 		- - The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies fr… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41173 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
427 - - - Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is… New CWE-22
Path Traversal 		CVE-2026-41205 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
428 8.7 HIGH
Network 		- - pretalx is a conference planning tool. Prior to 2026.1.0, The organiser search in the pretalx backend rendered submission titles, speaker display names, and user names/emails into the result dropdown… New CWE-79
Cross-site Scripting 		CVE-2026-41241 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
429 8.1 HIGH
Network 		- - Contour is a Kubernetes ingress controller using Envoy proxy. From v1.19.0 to before v1.33.4, v1.32.5, and v1.31.6, Contour's Cookie Rewriting feature is vulnerable to Lua code injection. An attacker… New CWE-94
Code Injection 		CVE-2026-41246 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
430 - - - elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injection vulnerability in the resize command. The bg (background … New CWE-78
OS Command  		CVE-2026-41247 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm