Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233831 7.8 危険 nongnu - Mail Notification における重要な情報を取得される脆弱性 - CVE-2007-3209 2012-09-25 16:47 2007-06-9 Show GitHub Exploit DB Packet Storm
233832 7.1 危険 Novell - Novell NetWare の NFS マウントデーモンにおけるバッファオーバーフローの脆弱性 - CVE-2007-3207 2012-09-25 16:47 2007-06-13 Show GitHub Exploit DB Packet Storm
233833 5 警告 The PHP Group
hardened-php project		 - PHP などの製品で使用される parse_str 関数における任意の変数を上書きされる脆弱性 - CVE-2007-3205 2012-09-25 16:47 2007-06-13 Show GitHub Exploit DB Packet Storm
233834 7.5 危険 jffnms - JFFNMS の auth.php における SQL インジェクションの脆弱性 - CVE-2007-3204 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
233835 4.9 警告 Novell - NetWare 用の NMAS における管理ユーザ名などを取得される脆弱性 - CVE-2007-3200 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
233836 4.3 警告 maran - Maran Blog の comments.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3198 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
233837 7.5 危険 vBulletin Solutions, Inc. - vBSupport の vBSupport.php における SQL インジェクションの脆弱性 - CVE-2007-3197 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
233838 7.5 危険 vBulletin Solutions, Inc. - vSupport Integrated Ticket System の vBSupport.php における SQL インジェクションの脆弱性 - CVE-2007-3196 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
233839 9.4 危険 jffnms - JFFNMS の admin/setup.php における設定を変更される脆弱性 - CVE-2007-3192 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
233840 9.4 危険 jffnms - JFFNMS における設定情報を取得される脆弱性 - CVE-2007-3191 2012-09-25 16:47 2007-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2031 4.9 MEDIUM
Network 		- - A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions … CWE-190
 Integer Overflow or Wraparound 		CVE-2026-39811 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2032 4.8 MEDIUM
Network 		- - A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 a… CWE-79
Cross-site Scripting 		CVE-2026-39812 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2033 9.8 CRITICAL
Network 		- - A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via <insert attack vector her… CWE-24
 Path Traversal: '../filedir' 		CVE-2026-39813 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2034 6.7 MEDIUM
Local 		- - A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.12, FortiWeb 7.2.7 through 7.2.12, FortiWeb 7.0.10 through 7… CWE-23
 Relative Path Traversal 		CVE-2026-39814 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2035 - - - CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port. CWE-798
 Use of Hard-coded Credentials 		CVE-2026-4832 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2036 - - - The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be used to read and write address… CWE-121
CWE-125
Stack-based Buffer Overflow
Out-of-bounds Read 		CVE-2026-5713 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2037 6.9 MEDIUM
Network 		- - A flaw was found in Keycloak, specifically in the organization selection login page. A remote attacker with `manage-realm` or `manage-organizations` administrative privileges can exploit a Stored Cro… CWE-79
Cross-site Scripting 		CVE-2026-37980 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2038 7.1 HIGH
Local 		- - A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in th… CWE-79
Cross-site Scripting 		CVE-2026-4344 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2039 7.1 HIGH
Local 		- - A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious … CWE-79
Cross-site Scripting 		CVE-2026-4345 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm
2040 7.1 HIGH
Local 		- - A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerabili… CWE-79
Cross-site Scripting 		CVE-2026-4369 2026-04-18 00:11 2026-04-15 Show GitHub Exploit DB Packet Storm