Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233361 3.3 注意 Novell - hugin における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2007-5200 2012-09-25 16:59 2007-10-12 Show GitHub Exploit DB Packet Storm
233362 6.8 警告 Nagios Enterprises, LLC - Nagios プラグインの redir 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5198 2012-09-25 16:59 2007-10-4 Show GitHub Exploit DB Packet Storm
233363 7.5 危険 Mono Project - Mono の Mono.Math.BigInteger クラスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5197 2012-09-25 16:59 2007-11-2 Show GitHub Exploit DB Packet Storm
233364 4.3 警告 megasol - OdysseySuite の Mailbox.mws におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5183 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
233365 4.3 警告 netkamp - Netkamp Emlak Scripti の mail.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5182 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
233366 7.5 危険 netkamp - Netkamp Emlak Scripti の detay.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5181 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
233367 7.5 危険 ohesa emlak portali - Ohesa Emlak Portali における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5180 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
233368 6.8 警告 mxbb - mxBB 用の mx_glance モジュールにおけるリモートファイルインクルージョン攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-5178 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
233369 7.5 危険 mambads
Mambo Foundation
- Mambo 用の MambAds コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5177 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
233370 6.8 警告 OpenID
phpBB
- phpBB Openid の includes/openid/Auth/OpenID/BBStore.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5173 2012-09-25 16:59 2007-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2261 6.2 MEDIUM
Network
- - Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication attempts vulnerability.… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2025-46606 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2262 6.6 MEDIUM
Network
- - Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with r… CWE-287
Improper Authentication
CVE-2025-46607 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2263 6.6 MEDIUM
Network
- - Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with r… CWE-287
Improper Authentication
CVE-2025-46641 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2264 4.3 MEDIUM
Network
- - Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.1… CWE-200
Information Exposure
CVE-2026-23777 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2265 5.9 MEDIUM
Network
- - Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.1… CWE-79
Cross-site Scripting
CVE-2026-28263 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2266 7.5 HIGH
Network
- - A flaw was found in dnsmasq. A remote attacker could exploit an out-of-bounds write vulnerability by sending a specially crafted BOOTREPLY (Bootstrap Protocol Reply) packet to a dnsmasq server config… CWE-787
 Out-of-bounds Write
CVE-2026-6507 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2267 7.5 HIGH
Network
vinyl-cache vinyl_cache Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger. A malicious client could send an HTTP/1 request, wait long enough until the session r… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2026-40396 2026-04-17 23:38 2026-04-13 Show GitHub Exploit DB Packet Storm
2268 7.5 HIGH
Network
varnish-software varnish_enterprise Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. The headerplus.write_req0() function from vmod_headerplus updates the underlying req… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-40395 2026-04-17 23:37 2026-04-13 Show GitHub Exploit DB Packet Storm
2269 7.5 HIGH
Network
varnish-software
vinyl-cache
varnish_enterprise
vinyl_cache
Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data. The setup of an HTTP/2 sess… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2026-40394 2026-04-17 23:35 2026-04-13 Show GitHub Exploit DB Packet Storm
2270 9.1 CRITICAL
Network
dolibarr dolibarr_erp\/crm Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute arbitrary SQL queries. Attackers can inject malic… CWE-89
SQL Injection
CVE-2019-25710 2026-04-17 23:25 2026-04-12 Show GitHub Exploit DB Packet Storm