Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233311 3.5 注意 Layton Technology - Layton HelpBox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5403 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
233312 6.5 警告 Layton Technology - Layton HelpBox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5402 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
233313 6.5 警告 Layton Technology - Layton HelpBox の uploadrequest.asp における任意の ASP ファイルを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5401 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
233314 4.3 警告 Nucleus - Nucleus の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5429 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
233315 4.3 警告 Joomla! - Joomla! 用の com_search コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5427 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
233316 4.3 警告 interspire - ActiveKB NX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5426 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
233317 6.4 警告 interspire - Interspire ActiveKB の admin/index.php における SQL インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5425 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
233318 7.5 危険 The PHP Group - PHP の disable_functions 関数における制限を回避される脆弱性 CWE-DesignError
CVE-2007-5424 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
233319 4.3 警告 Mozilla Foundation - Mozilla Firefox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5415 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
233320 2.6 注意 Mozilla Foundation - Mozilla Firefox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5414 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1931 - - - Missing Authorization vulnerability in Rustaurius Order Tracking order-tracking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Tracking: from n/a thr… CWE-862
 Missing Authorization
CVE-2026-39602 2026-04-14 05:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1932 6.5 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This… CWE-79
Cross-site Scripting
CVE-2026-39500 2026-04-14 05:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1933 7.6 HIGH
Network
- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a throu… CWE-89
SQL Injection
CVE-2026-39496 2026-04-14 05:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1934 6.5 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Post Expirator post-expirator allows DOM-Based XSS.This issue affects Post Expirator… CWE-79
Cross-site Scripting
CVE-2026-39482 2026-04-14 05:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1935 9.8 CRITICAL
Network
- - Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in authentication helper execution where helper configuration values are executed using shell=true without… CWE-78
OS Command 
CVE-2026-35022 2026-04-14 05:16 2026-04-7 Show GitHub Exploit DB Packet Storm
1936 7.8 HIGH
Local
- - Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the prompt editor invocation utility that allows attackers to execute arbitrary commands by crafting ma… CWE-78
OS Command 
CVE-2026-35021 2026-04-14 05:16 2026-04-7 Show GitHub Exploit DB Packet Storm
1937 8.4 HIGH
Local
- - Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the command lookup helper and deep-link terminal launcher that allows local attackers to execute arbitr… CWE-78
OS Command 
CVE-2026-35020 2026-04-14 05:16 2026-04-7 Show GitHub Exploit DB Packet Storm
1938 4.7 MEDIUM
Local
amd athlon_x4_750_firmware
athlon_x4_760k_firmware
athlon_x4_830_firmware
athlon_x4_840_firmware
athlon_x4_860k_firmware
athlon_x4_870k_firmware
athlon_x4_880k_firmware
athlon_x4_835…
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure. NVD-CWE-noinfo
CVE-2022-27672 2026-04-14 05:16 2023-03-1 Show GitHub Exploit DB Packet Storm
1939 3.1 LOW
Network
libssh
redhat
libssh
enterprise_linux
A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listin… CWE-476
 NULL Pointer Dereference
CVE-2026-0968 2026-04-14 05:15 2026-03-27 Show GitHub Exploit DB Packet Storm
1940 3.1 LOW
Network
libssh
redhat
libssh
enterprise_linux
Se encontró una falla en libssh en la que un servidor SFTP (Protocolo de Transferencia de Archivos SSH) malicioso puede explotar esto enviando un campo 'longname' malformado dentro de un mensaje 'SSH… CWE-476
 NULL Pointer Dereference
CVE-2026-0968 2026-04-14 05:15 2026-03-27 Show GitHub Exploit DB Packet Storm