Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233611 7.5 危険 jx development - phpVoter の includes/functions.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4118 2012-09-25 16:59 2007-08-1 Show GitHub Exploit DB Packet Storm
233612 6.8 警告 metyus - Metyus Forum Portal の philboard_forum.asp における SQL インジェクションの脆弱性 - CVE-2007-4116 2012-09-25 16:59 2007-07-31 Show GitHub Exploit DB Packet Storm
233613 4.3 警告 itcms - IT!CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4115 2012-09-25 16:59 2007-07-31 Show GitHub Exploit DB Packet Storm
233614 4.3 警告 ide group - IDE Group の DRS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4192 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
233615 6.9 警告 Panda Security - Panda Antivirus における LocalSystem の権限を取得される脆弱性 - CVE-2007-4191 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
233616 4.3 警告 Joomla! - Joomla! における CRLF インジェクションの脆弱性 - CVE-2007-4190 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
233617 4.3 警告 Joomla! - Joomla! におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4189 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
233618 9.3 危険 Joomla! - Joomla! におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-4188 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
233619 7.5 危険 Joomla! - Joomla! の com_search コンポーネントにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-4187 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
233620 6.8 警告 Joomla! - Joomla! 用の Tour de France Pool における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4186 2012-09-25 16:59 2007-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2251 6.3 MEDIUM
Network
- - Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: H… CWE-416
 Use After Free
CVE-2026-6362 2026-04-18 00:08 2026-04-16 Show GitHub Exploit DB Packet Storm
2252 8.8 HIGH
Network
- - Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) CWE-843
Type Confusion
CVE-2026-6363 2026-04-18 00:08 2026-04-16 Show GitHub Exploit DB Packet Storm
2253 6.5 MEDIUM
Network
- - Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (Chromium security se… CWE-125
Out-of-bounds Read
CVE-2026-6364 2026-04-18 00:08 2026-04-16 Show GitHub Exploit DB Packet Storm
2254 5.3 MEDIUM
Network
- - A flaw was found in the AAP MCP server. An unauthenticated remote attacker can exploit a log injection vulnerability by sending specially crafted input to the `toolsetroute` parameter. This parameter… CWE-117
 Improper Output Neutralization for Logs
CVE-2026-6494 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2255 6.7 MEDIUM
Local
- - Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizat… CWE-78
OS Command 
CVE-2026-35072 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2256 6.7 MEDIUM
Local
- - Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizat… CWE-78
OS Command 
CVE-2026-35073 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2257 6.7 MEDIUM
Local
- - Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizat… CWE-78
OS Command 
CVE-2026-35074 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2258 6.7 MEDIUM
Local
- - Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizat… CWE-88
Argument Injection
CVE-2026-35153 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2259 - - - GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker t… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-5131 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm
2260 6.2 MEDIUM
Network
- - Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged attacker with remote ac… CWE-384
 Session Fixation
CVE-2025-46605 2026-04-18 00:07 2026-04-17 Show GitHub Exploit DB Packet Storm