Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233911 7.5 危険 my little homepage - my little forum の user.php における SQL インジェクションの脆弱性 - CVE-2007-2942 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
233912 7.5 危険 michael brandon - vBulletin の vBGSiteMap の作成元における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2941 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
233913 6.8 警告 mazens php chat - Mazen's PHP Chat における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2939 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
233914 10 危険 マイクロソフト
Honeywell International Inc.		 - Ademco ATNBaseLoader100.dll におけるバッファオーバーフローの脆弱性 - CVE-2007-2938 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
233915 7.5 危険 phil-a-form - Joomla! 用の philaform コンポーネントにおける SQL インジェクションの脆弱性 - CVE-2007-2933 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
233916 9.3 危険 Novell - Novell exteNd Director などの launch メソッドにおける任意のコマンドを実行される脆弱性 - CVE-2007-2923 2012-09-25 16:47 2007-06-18 Show GitHub Exploit DB Packet Storm
233917 6.8 警告 Logitech - Logitech VideoCall の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2918 2012-09-25 16:47 2007-05-31 Show GitHub Exploit DB Packet Storm
233918 5 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin における削除済みユーザの違反 "red flag" を発見される脆弱性 - CVE-2007-2912 2012-09-25 16:47 2007-02-13 Show GitHub Exploit DB Packet Storm
233919 8.5 危険 vBulletin Solutions, Inc. - Jelsoft vBulletin の admincp/attachment.php における SQL インジェクションの脆弱性 - CVE-2007-2911 2012-09-25 16:47 2007-03-19 Show GitHub Exploit DB Packet Storm
233920 4.3 警告 vBulletin Solutions, Inc. - Jelsoft vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-2910 2012-09-25 16:47 2007-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1421 - - - Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System. The vulnerability is present in the '/blog' endpoint because user input is not properly sanitized through des… CWE-79
Cross-site Scripting 		CVE-2026-3317 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1422 - - - This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnera… CWE-78
OS Command  		CVE-2026-41036 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1423 - - - This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same netwo… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-41037 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1424 - - - Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CM… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2026-6553 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1425 - - - This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this v… CWE-521
Weak Password Requirements  		CVE-2026-41038 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1426 - - - This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface. An unauthenticated attacker could exploit… CWE-306
Missing Authentication for Critical Function 		CVE-2026-41039 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1427 - - - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to modify file attributes outside t… CWE-22
Path Traversal 		CVE-2026-32147 2026-04-22 01:20 2026-04-21 Show GitHub Exploit DB Packet Storm
1428 - - - Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL usin… CWE-79
Cross-site Scripting 		CVE-2025-10354 2026-04-22 01:20 2026-04-22 Show GitHub Exploit DB Packet Storm
1429 - - - HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a req… CWE-79
Cross-site Scripting 		CVE-2025-41011 2026-04-22 01:20 2026-04-22 Show GitHub Exploit DB Packet Storm
1430 - - - SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parame… CWE-89
SQL Injection 		CVE-2025-41029 2026-04-22 01:20 2026-04-22 Show GitHub Exploit DB Packet Storm