Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232311 7.8 危険 Linux - Linux kernel の drivers/net/pppol2tp.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2750 2012-09-25 17:17 2008-06-10 Show GitHub Exploit DB Packet Storm
232312 2.1 注意 no-ip - Windows 上で稼動する No-IP DUC における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2747 2012-09-25 17:17 2008-06-18 Show GitHub Exploit DB Packet Storm
232313 5 警告 Bharat Mediratta - Menalto Gallery におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2724 2012-09-25 17:17 2008-06-12 Show GitHub Exploit DB Packet Storm
232314 5 警告 Bharat Mediratta - Menalto Gallery の embed.php におけるフルパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2723 2012-09-25 17:17 2008-06-12 Show GitHub Exploit DB Packet Storm
232315 7.5 危険 Bharat Mediratta - Menalto Gallery におけるサブアルバムへのパーミッションを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2722 2012-09-25 17:17 2008-06-12 Show GitHub Exploit DB Packet Storm
232316 5 警告 Bharat Mediratta - Menalto Gallery の album-select モジュールにおける隠しアルバムのタイトルを取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-2721 2012-09-25 17:17 2008-06-12 Show GitHub Exploit DB Packet Storm
232317 4.3 警告 Bharat Mediratta - Menalto Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2720 2012-09-25 17:17 2008-06-12 Show GitHub Exploit DB Packet Storm
232318 6.8 警告 The NASM development team - NASM の ppscan 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2008-2719 2012-09-25 17:17 2008-06-16 Show GitHub Exploit DB Packet Storm
232319 4.7 警告 IBM - IBM OS/400 上の RCHMGR モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2709 2012-09-25 17:17 2008-06-16 Show GitHub Exploit DB Packet Storm
232320 5 警告 Novell - Novell GWIM におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-2704 2012-09-25 17:17 2008-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1031 4.3 MEDIUM
Network 		- - BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have an Open Redirect through bigbluebutton/api/join via get-parameter "logoutURL." Version 3.0.24 has adjusted the handlin… New CWE-601
Open Redirect 		CVE-2026-41126 2026-04-23 05:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1032 6.5 MEDIUM
Network 		- - BigBlueButton is an open-source virtual classroom. Versions prior to 3.0.24 have a missing authorization that allows viewers to inject/overwrite captions Version 3.0.24 tightened the permissions on w… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-41127 2026-04-23 05:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1033 - - - Craft CMS is a content management system (CMS). In versions 5.6.0 through 5.9.14, the `actionSavePermissions()` endpoint allows a user with only `viewUsers` permission to remove arbitrary users from … New CWE-862
 Missing Authorization 		CVE-2026-41128 2026-04-23 05:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1034 - - - Craft CMS is a content management system (CMS). Versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14 are vulnerable to Server-Side Request Forgery. The exploitation requires a … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41129 2026-04-23 05:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1035 - - - Craft CMS is a content management system (CMS). In versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14, the `resource-js` endpoint in Craft CMS allows unauthenticated requests… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41130 2026-04-23 05:26 2026-04-22 Show GitHub Exploit DB Packet Storm
1036 6.4 MEDIUM
Network 		- - The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagram_follow_text' setting in all versions up to, and including, … Update CWE-79
Cross-site Scripting 		CVE-2026-5162 2026-04-23 05:22 2026-04-17 Show GitHub Exploit DB Packet Storm
1037 6.5 MEDIUM
Network 		- - The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3.9.8. This is due to insufficient escaping on the 'date' parameter combined with direct interpolatio… Update CWE-89
SQL Injection 		CVE-2026-6080 2026-04-23 05:22 2026-04-17 Show GitHub Exploit DB Packet Storm
1038 6.5 MEDIUM
Network 		- - The WP Statistics plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 14.16.4. This is due to missing capability checks on multiple AJAX handlers includi… Update CWE-862
 Missing Authorization 		CVE-2026-3488 2026-04-23 05:22 2026-04-17 Show GitHub Exploit DB Packet Storm
1039 9.8 CRITICAL
Network 		- - All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in a… Update CWE-506
 Embedded Malicious Code 		CVE-2026-6443 2026-04-23 05:22 2026-04-17 Show GitHub Exploit DB Packet Storm
1040 7.2 HIGH
Network 		- - A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. … Update CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-6483 2026-04-23 05:22 2026-04-17 Show GitHub Exploit DB Packet Storm