Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233571 4.3 警告 KnowledgeTree - KnowledgeTree Open Source におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4281 2012-09-25 16:59 2007-08-9 Show GitHub Exploit DB Packet Storm
233572 6.9 警告 IBM - IBM DB2 UDB におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4276 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
233573 6.9 警告 IBM - IBM DB2 UDB における権限を取得される脆弱性 - CVE-2007-4275 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
233574 4.6 警告 IBM - IBM DB2 UDB における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2007-4273 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
233575 1.9 注意 IBM - IBM DB2 UDB における任意のファイルを作成される脆弱性 - CVE-2007-4272 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
233576 2.1 注意 IBM - IBM DB2 UDB におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4271 2012-09-25 16:59 2007-08-16 Show GitHub Exploit DB Packet Storm
233577 6.9 警告 IBM - IBM DB2 UDB における root 権限を取得される脆弱性 - CVE-2007-4270 2012-09-25 16:59 2007-08-18 Show GitHub Exploit DB Packet Storm
233578 4.3 警告 kai blankenhorn bitfolge - Kai Blankenhorn Bitfolge simple and nice index file におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4264 2012-09-25 16:59 2007-08-9 Show GitHub Exploit DB Packet Storm
233579 6.8 警告 lfs - LFS におけるバッファオーバーフローの脆弱性 - CVE-2007-4257 2012-09-25 16:59 2007-08-8 Show GitHub Exploit DB Packet Storm
233580 7.5 危険 The PHP Group - PHP の mSQL エクステンションにおけるバッファオーバーフローの脆弱性 - CVE-2007-4255 2012-09-25 16:59 2007-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2121 7.4 HIGH
Network 		- - Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the OIDC callback handler issues a full JWT token without checking whether the matched user has TOTP two-factor authent… CWE-287
Improper Authentication 		CVE-2026-34727 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
2122 7.1 HIGH
Network 		- - Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook result view page allows any authenticated teach… CWE-476
CWE-639
 NULL Pointer Dereference
 Authorization Bypass Through User-Controlled Key 		CVE-2026-32894 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
2123 8.3 HIGH
Network 		- - Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $_REQUEST['test'] is conca… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-31939 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
2124 6.1 MEDIUM
Network 		apache skywalking Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <= 10.2.0. Users are recommended to upgrade t… CWE-80
Basic XSS 		CVE-2025-54057 2026-04-14 01:16 2025-11-27 Show GitHub Exploit DB Packet Storm
2125 9.8 CRITICAL
Network 		samsung exynos_990_firmware
exynos_980_firmware
exynos_850_firmware
exynos_1080_firmware
exynos_1280_firmware
exynos_1330_firmware
exynos_1380_firmware
exynos_1480_firmware
exynos_158… 		An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 512… CWE-787
 Out-of-bounds Write 		CVE-2025-62818 2026-04-14 00:31 2026-04-8 Show GitHub Exploit DB Packet Storm
2126 3.8 LOW
Network 		sonicwall email_security A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could expl… CWE-20
NVD-CWE-noinfo
 Improper Input Validation  		CVE-2026-3470 2026-04-14 00:26 2026-04-1 Show GitHub Exploit DB Packet Storm
2127 6.5 MEDIUM
Network 		microsoft xml_notepad XML Notepad is a Windows program that provides a simple intuitive User Interface for browsing and editing XML documents. Prior to version 2.9.0.21, XML Notepad does not disable DTD processing by defa… CWE-611
XXE 		CVE-2026-34401 2026-04-14 00:19 2026-04-1 Show GitHub Exploit DB Packet Storm
2128 7.3 HIGH
Network 		- - A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation o… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-6183 2026-04-14 00:17 2026-04-14 Show GitHub Exploit DB Packet Storm
2129 7.3 HIGH
Network 		- - A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. Such manipulation of… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-6182 2026-04-14 00:17 2026-04-14 Show GitHub Exploit DB Packet Storm
2130 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exp… CWE-787
 Out-of-bounds Write 		CVE-2026-5735 2026-04-14 00:17 2026-04-7 Show GitHub Exploit DB Packet Storm