Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232971 4.3 警告 MPlayer project - MPlayer におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2007-6718 2012-09-25 16:59 2008-10-20 Show GitHub Exploit DB Packet Storm
232972 4.3 警告 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-6715 2012-09-25 16:59 2008-04-17 Show GitHub Exploit DB Packet Storm
232973 7.5 危険 シスコシステムズ (Linksys) - Cisco Linksys WAG54GS Wireless-G ADSL Gateway におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6709 2012-09-25 16:59 2008-03-13 Show GitHub Exploit DB Packet Storm
232974 4.3 警告 シスコシステムズ (Linksys) - Cisco Linksys WAG54GS Wireless-G ADSL Gateway におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6708 2012-09-25 16:59 2008-03-13 Show GitHub Exploit DB Packet Storm
232975 4.3 警告 シスコシステムズ (Linksys) - Cisco Linksys WAG54GS Wireless-G ADSL Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6707 2012-09-25 16:59 2008-03-13 Show GitHub Exploit DB Packet Storm
232976 4.3 警告 OpenBSD - OpenBSD の BGPD デーモン用の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6700 2012-09-25 16:59 2008-02-4 Show GitHub Exploit DB Packet Storm
232977 7.5 危険 max kervin - KerviNet Forum の topic.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6727 2012-09-25 16:59 2007-04-18 Show GitHub Exploit DB Packet Storm
232978 3.3 注意 IBM - WebSphere MQ クライアントにおける任意のハンドルを複製される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6705 2012-09-25 16:59 2007-07-27 Show GitHub Exploit DB Packet Storm
232979 10 危険 Novell - Novell Client の Spooler サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6701 2012-09-25 16:59 2007-07-26 Show GitHub Exploit DB Packet Storm
232980 10 危険 Bharat Mediratta - Menalto Gallery の WebCam モジュールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2007-6693 2012-09-25 16:59 2007-12-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1511 4.8 MEDIUM
Network 		- - ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the User Editor (UserEditor.php) renders stored usernames directly into an HTML input value attribute without applyin… CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output 		CVE-2026-40593 2026-04-21 03:59 2026-04-18 Show GitHub Exploit DB Packet Storm
1512 - - - editorconfig-core-c is an EditorConfig core library for use by plugins supporting EditorConfig parsing. Versions up to and including 0.12.10 have a stack-based buffer overflow in ec_glob() that allo… CWE-121
CWE-787
Stack-based Buffer Overflow
 Out-of-bounds Write 		CVE-2026-40489 2026-04-21 03:59 2026-04-18 Show GitHub Exploit DB Packet Storm
1513 6.8 MEDIUM
Network 		- - The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When redirect following is enabled (followRedirect(true)), versio… CWE-200
Information Exposure 		CVE-2026-40490 2026-04-21 03:59 2026-04-18 Show GitHub Exploit DB Packet Storm
1514 5.3 MEDIUM
Network 		- - OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.11.0 and prior to version 2.0.13, the /api… CWE-204
 Response Discrepancy Information Exposure 		CVE-2026-24468 2026-04-21 03:59 2026-04-21 Show GitHub Exploit DB Packet Storm
1515 9.8 CRITICAL
Network 		- - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302, the TGA codec's RLE de… CWE-787
 Out-of-bounds Write 		CVE-2026-40494 2026-04-21 03:55 2026-04-18 Show GitHub Exploit DB Packet Storm
1516 9.8 CRITICAL
Network 		- - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02, the XWD codec resolves… CWE-787
 Out-of-bounds Write 		CVE-2026-40492 2026-04-21 03:55 2026-04-18 Show GitHub Exploit DB Packet Storm
1517 9.8 CRITICAL
Network 		- - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit c930284445ea3ff94451ccd7a57c999eca3bc979, the PSD codec computes… CWE-787
 Out-of-bounds Write 		CVE-2026-40493 2026-04-21 03:55 2026-04-18 Show GitHub Exploit DB Packet Storm
1518 8.8 HIGH
Network 		- - Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged fields on their own profile. Attacker… CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-34427 2026-04-21 03:54 2026-04-21 Show GitHub Exploit DB Packet Storm
1519 7.7 HIGH
Network 		- - Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy action of the editor/editor module where the url parameter is passed directly to getUrl() via curl witho… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-34428 2026-04-21 03:54 2026-04-21 Show GitHub Exploit DB Packet Storm
1520 5.4 MEDIUM
Network 		- - Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitrary JavaScript by bypassing MIME … CWE-79
Cross-site Scripting 		CVE-2026-34429 2026-04-21 03:54 2026-04-21 Show GitHub Exploit DB Packet Storm