Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233541 9.3 危険 Irssi - irssi の ixmmsa.pl スクリプトなどにおける CRLF インジェクションの脆弱性 - CVE-2007-4396 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
233542 4.3 警告 Nullsoft - Winamp におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-4392 2012-09-25 16:59 2007-08-17 Show GitHub Exploit DB Packet Storm
233543 6.8 警告 OWASP - OWASP Stinger における入力検証ルーチンを回避される脆弱性 - CVE-2007-4385 2012-09-25 16:59 2007-08-17 Show GitHub Exploit DB Packet Storm
233544 6 警告 Netwin Ltd - SurgeMail の IMAP サービスにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-4377 2012-09-25 16:59 2007-08-16 Show GitHub Exploit DB Packet Storm
233545 10 危険 Netwin Ltd - NetWin SurgeMail における脆弱性 CWE-noinfo
情報不足
CVE-2007-4372 2012-09-25 16:59 2007-08-16 Show GitHub Exploit DB Packet Storm
233546 6.8 警告 hotscripts - Neuron Blog の admin/pages/blog-add.php における任意の PHP ファイルを実行される脆弱性 - CVE-2007-4371 2012-09-25 16:59 2007-08-15 Show GitHub Exploit DB Packet Storm
233547 7.5 危険 IBM - IBM Rational CQ Web の /main 配下における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-4368 2012-09-25 16:59 2007-08-15 Show GitHub Exploit DB Packet Storm
233548 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 - CVE-2007-4367 2012-09-25 16:59 2007-08-15 Show GitHub Exploit DB Packet Storm
233549 10 危険 ネットギア - NETGEAR ReadyNAS RAIDiator におけるパスワードを推測される脆弱性 - CVE-2007-4361 2012-09-25 16:59 2007-08-15 Show GitHub Exploit DB Packet Storm
233550 5 警告 Mozilla Foundation - Mozilla Firefox におけるステータスバーのコンテンツを偽造される脆弱性 - CVE-2007-4357 2012-09-25 16:59 2007-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1581 9.8 CRITICAL
Network
microsoft bing_images Neutralización incorrecta de elementos especiales utilizados en un comando de sistema operativo ('inyección de comandos de sistema operativo') en Microsoft Bing Images permite a un atacante no autori… CWE-78
OS Command 
CVE-2026-32191 2026-04-15 01:35 2026-03-20 Show GitHub Exploit DB Packet Storm
1582 9.8 CRITICAL
Network
microsoft bing_images Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network. CWE-77
Command Injection
CVE-2026-32194 2026-04-15 01:35 2026-03-20 Show GitHub Exploit DB Packet Storm
1583 9.8 CRITICAL
Network
microsoft bing_images Neutralización incorrecta de elementos especiales utilizados en un comando ('inyección de comandos') en Microsoft Bing Images permite a un atacante no autorizado ejecutar código a través de una red. CWE-77
Command Injection
CVE-2026-32194 2026-04-15 01:35 2026-03-20 Show GitHub Exploit DB Packet Storm
1584 5.4 MEDIUM
Network
smoothwall smoothwall_express Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of the VPN_IP parameter. Authentic… CWE-79
Cross-site Scripting
CVE-2026-26352 2026-04-15 01:34 2026-03-31 Show GitHub Exploit DB Packet Storm
1585 5.4 MEDIUM
Network
smoothwall smoothwall_express Smoothwall Express versiones anteriores a 3.1 Update 13 contienen una vulnerabilidad de cross-site scripting almacenado en el script /cgi-bin/vpnmain.cgi debido a una sanitización inadecuada del pará… CWE-79
Cross-site Scripting
CVE-2026-26352 2026-04-15 01:34 2026-03-31 Show GitHub Exploit DB Packet Storm
1586 4.7 MEDIUM
Local
huawei harmonyos UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-362
Race Condition
CVE-2026-34849 2026-04-15 01:34 2026-04-13 Show GitHub Exploit DB Packet Storm
1587 6.1 MEDIUM
Network
smoothwall smoothwall_express Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of the url parameter. Attackers can … CWE-79
Cross-site Scripting
CVE-2026-27508 2026-04-15 01:32 2026-03-31 Show GitHub Exploit DB Packet Storm
1588 6.1 MEDIUM
Network
smoothwall smoothwall_express Las versiones de Smoothwall Express anteriores a 3.1 Update 13 contienen una vulnerabilidad de cross-site scripting reflejado en el endpoint /redirect.cgi debido a una sanitización inadecuada del par… CWE-79
Cross-site Scripting
CVE-2026-27508 2026-04-15 01:32 2026-03-31 Show GitHub Exploit DB Packet Storm
1589 4.3 MEDIUM
Network
powerdns dnsdist When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information abo… CWE-942
 Permissive Cross-domain Policy with Untrusted Domains
CVE-2026-0397 2026-04-15 01:27 2026-03-31 Show GitHub Exploit DB Packet Storm
1590 8.2 HIGH
Network
powerdns dnsdist An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might t… CWE-126
 Buffer Over-read
CVE-2026-24028 2026-04-15 01:27 2026-03-31 Show GitHub Exploit DB Packet Storm