Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240421 7.5 危険 binn - Binn SBuilder の full_text.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0253 2012-06-26 15:54 2008-01-15 Show GitHub Exploit DB Packet Storm
240422 7.5 危険 cherrypy - 複数の製品の _get_file_path 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0252 2012-06-26 15:54 2008-01-11 Show GitHub Exploit DB Packet Storm
240423 9.3 危険 gateway - Gateway Weblaunch におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0221 2012-06-26 15:54 2008-01-10 Show GitHub Exploit DB Packet Storm
240424 7.5 危険 gateway - Gateway Weblaunch におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0220 2012-06-26 15:54 2008-01-10 Show GitHub Exploit DB Packet Storm
240425 6.9 警告 FreeBSD - FreeBSD のスクリプトプログラムにおけるユーザの端末からデータを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0217 2012-06-26 15:54 2008-01-14 Show GitHub Exploit DB Packet Storm
240426 2.1 注意 FreeBSD - FreeBSD の ptsname 関数における他のユーザから pty からのデータを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0216 2012-06-26 15:54 2008-01-14 Show GitHub Exploit DB Packet Storm
240427 4.9 警告 compaq - HP Compaq Business Notebook PC の BIOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-0211 2012-06-26 15:54 2008-03-27 Show GitHub Exploit DB Packet Storm
240428 4.3 警告 expressionengine - ExpressionEngine の index.php における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0202 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
240429 4.3 警告 expressionengine - ExpressionEngine の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0201 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
240430 4.3 警告 awesometemplateengine - AwesomeTemplateEngine の templates/example_template.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0190 2012-06-26 15:54 2008-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Update CWE-59
CWE-269
Link Following
 Improper Privilege Management 		CVE-2026-32212 2026-04-20 23:55 2026-04-15 Show GitHub Exploit DB Packet Storm
152 9.0 CRITICAL
Network 		b3log siyuan SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, Mermaid diagrams are rendered with securityLevel set to "loose", and the resulting SVG is injected into the… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-40322 2026-04-20 23:51 2026-04-17 Show GitHub Exploit DB Packet Storm
153 7.2 HIGH
Network 		cubecart cubecart An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command. New CWE-78
OS Command  		CVE-2026-21719 2026-04-20 23:45 2026-04-17 Show GitHub Exploit DB Packet Storm
154 9.8 CRITICAL
Network 		cubecart cubecart An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product. New CWE-89
SQL Injection 		CVE-2026-34018 2026-04-20 23:44 2026-04-17 Show GitHub Exploit DB Packet Storm
155 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Update CWE-284
Improper Access Control 		CVE-2026-32214 2026-04-20 23:43 2026-04-15 Show GitHub Exploit DB Packet Storm
156 2.7 LOW
Network 		cubecart cubecart A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be accessible. New CWE-22
Path Traversal 		CVE-2026-35496 2026-04-20 23:43 2026-04-17 Show GitHub Exploit DB Packet Storm
157 6.5 MEDIUM
Network 		pac4j pac4j PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site requ… New CWE-352
 Origin Validation Error 		CVE-2026-40458 2026-04-20 23:41 2026-04-17 Show GitHub Exploit DB Packet Storm
158 8.8 HIGH
Network 		pac4j pac4j PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP … New CWE-90
LDAP Injection 		CVE-2026-40459 2026-04-20 23:38 2026-04-17 Show GitHub Exploit DB Packet Storm
159 5.5 MEDIUM
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_… 		Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. Update CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-32215 2026-04-20 23:35 2026-04-15 Show GitHub Exploit DB Packet Storm
160 5.5 MEDIUM
Local 		microsoft windows_11_26h1 Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally. Update CWE-476
 NULL Pointer Dereference 		CVE-2026-32216 2026-04-20 23:34 2026-04-15 Show GitHub Exploit DB Packet Storm