Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233021 5 警告 hotscripts - Hot or Not Clone における管理者ユーザ名およびパスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6603 2012-09-25 16:59 2007-12-31 Show GitHub Exploit DB Packet Storm
233022 7.5 危険 noserub - NoseRub の app/models/identity.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6602 2012-09-25 16:59 2007-12-31 Show GitHub Exploit DB Packet Storm
233023 4.3 警告 OpenAFS - OpenAFS の fileserver におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2007-6599 2012-09-25 16:59 2007-12-20 Show GitHub Exploit DB Packet Storm
233024 4.3 警告 iportalx - IPortalX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6597 2012-09-25 16:59 2007-12-31 Show GitHub Exploit DB Packet Storm
233025 4.3 警告 KDE project - KDE における偽造 Web サイトの無効な証明書をユーザが受領する脆弱性 CWE-DesignError
CVE-2007-6591 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
233026 4.3 警告 Mozilla Foundation - Mozilla Firefox などの jar プロトコルハンドラにおける XSS 攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6589 2012-09-25 16:59 2007-11-26 Show GitHub Exploit DB Packet Storm
233027 7.5 危険 niclor - nicLOR-CMS の sezione_news.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6586 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
233028 6.8 警告 nmnnewsletter - NmnNewsletter の confirmUnsubscription.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6585 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
233029 7.5 危険 ip reg - Ip Reg における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6579 2012-09-25 16:59 2007-12-28 Show GitHub Exploit DB Packet Storm
233030 4.3 警告 limbo cms - Limbo CMS の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6564 2012-09-25 16:59 2007-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1421 - - - Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through des… CWE-79
Cross-site Scripting 		CVE-2026-3317 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1422 - - - This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnera… CWE-78
OS Command  		CVE-2026-41036 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1423 - - - This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same netwo… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-41037 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1424 - - - Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CM… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2026-6553 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1425 - - - This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this v… CWE-521
Weak Password Requirements  		CVE-2026-41038 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1426 - - - This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit… CWE-306
Missing Authentication for Critical Function 		CVE-2026-41039 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1427 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to modify file attributes outside t… CWE-22
Path Traversal 		CVE-2026-32147 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1428 - - - Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL usin… CWE-79
Cross-site Scripting 		CVE-2025-10354 2026-04-22 01:20 2026-04-22 Show GitHub Exploit DB Packet Storm
1429 - - - HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a req… CWE-79
Cross-site Scripting 		CVE-2025-41011 2026-04-22 01:20 2026-04-22 Show GitHub Exploit DB Packet Storm
1430 - - - SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parame… CWE-89
SQL Injection 		CVE-2025-41029 2026-04-22 01:20 2026-04-22 Show GitHub Exploit DB Packet Storm