Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233761 7.5 危険 Novell - Novell Access Manager の Linux Access Gateway におけるセキュリティコントロールを回避される脆弱性 - CVE-2007-3570 2012-09-25 16:47 2007-07-5 Show GitHub Exploit DB Packet Storm
233762 5 警告 imlib - imlib の _LoadBMP 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3568 2012-09-25 16:47 2007-07-5 Show GitHub Exploit DB Packet Storm
233763 7.5 危険 MySQLDumper-Team - MySQLDumper における認証要求を回避される脆弱性 - CVE-2007-3567 2012-09-25 16:47 2007-07-5 Show GitHub Exploit DB Packet Storm
233764 7.5 危険 Haxx - libcurl における特定のアクセス制限を回避される脆弱性 - CVE-2007-3564 2012-09-25 16:47 2007-07-10 Show GitHub Exploit DB Packet Storm
233765 7.5 危険 php director - PHP Director の videos.php における SQL インジェクションの脆弱性 - CVE-2007-3562 2012-09-25 16:47 2007-07-4 Show GitHub Exploit DB Packet Storm
233766 4.3 警告 Moodle - Moodle の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3555 2012-09-25 16:47 2007-07-4 Show GitHub Exploit DB Packet Storm
233767 7.6 危険 ヒューレット・パッカード - HP Instant Support - Driver Check におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3554 2012-09-25 16:47 2007-06-13 Show GitHub Exploit DB Packet Storm
233768 4.3 警告 オラクル - Oracle Application Server 11i の Rapid Install Web Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3553 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
233769 4.3 警告 Tenable, Inc. - Nessus Vulnerability Scanner の Windows GUI におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3546 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
233770 7.8 危険 IBM - iSeries マシン上の IBM OS/400 におけるファイアーウォールルールを回避される脆弱性 - CVE-2007-3537 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. CWE-59
CWE-269
Link Following
 Improper Privilege Management 		CVE-2026-32212 2026-04-20 23:55 2026-04-15 Show GitHub Exploit DB Packet Storm
152 9.0 CRITICAL
Network 		b3log siyuan SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, Mermaid diagrams are rendered with securityLevel set to "loose", and the resulting SVG is injected into the… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-40322 2026-04-20 23:51 2026-04-17 Show GitHub Exploit DB Packet Storm
153 7.2 HIGH
Network 		cubecart cubecart An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command. CWE-78
OS Command  		CVE-2026-21719 2026-04-20 23:45 2026-04-17 Show GitHub Exploit DB Packet Storm
154 9.8 CRITICAL
Network 		cubecart cubecart An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product. CWE-89
SQL Injection 		CVE-2026-34018 2026-04-20 23:44 2026-04-17 Show GitHub Exploit DB Packet Storm
155 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. CWE-284
Improper Access Control 		CVE-2026-32214 2026-04-20 23:43 2026-04-15 Show GitHub Exploit DB Packet Storm
156 2.7 LOW
Network 		cubecart cubecart A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be accessible. CWE-22
Path Traversal 		CVE-2026-35496 2026-04-20 23:43 2026-04-17 Show GitHub Exploit DB Packet Storm
157 6.5 MEDIUM
Network 		pac4j pac4j PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site requ… CWE-352
 Origin Validation Error 		CVE-2026-40458 2026-04-20 23:41 2026-04-17 Show GitHub Exploit DB Packet Storm
158 8.8 HIGH
Network 		pac4j pac4j PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP … CWE-90
LDAP Injection 		CVE-2026-40459 2026-04-20 23:38 2026-04-17 Show GitHub Exploit DB Packet Storm
159 5.5 MEDIUM
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_… 		Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-32215 2026-04-20 23:35 2026-04-15 Show GitHub Exploit DB Packet Storm
160 5.5 MEDIUM
Local 		microsoft windows_11_26h1 Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally. CWE-476
 NULL Pointer Dereference 		CVE-2026-32216 2026-04-20 23:34 2026-04-15 Show GitHub Exploit DB Packet Storm