Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241531 7.8 危険 fruit2004 - Remote Display Dev キットの RControl.dll におけるバッファオーバーフローの脆弱性 - CVE-2007-2623 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241532 7.5 危険 extrovert software - Thyme Calendar の event_view.php における SQL インジェクションの脆弱性 - CVE-2007-2621 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241533 5.1 警告 drake team - Drake CMS の index.php における CRLF インジェクションの脆弱性 - CVE-2007-2618 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241534 7.5 危険 crie sue - Crie seu PHPLojaFacil における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2615 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241535 6.8 警告 cgx - CGX における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2611 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241536 7.5 危険 gnuedu - gnuedu における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2609 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241537 7.8 危険 Firebird Project - Firebird におけるバッファオーバーフローの脆弱性 - CVE-2007-2606 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241538 7.1 危険 brujula toolbar - Brujula Toolbar の BRUJULA4.NET.DLL におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2605 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241539 7.8 危険 brew city software - FlexLabel ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2604 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
241540 7.8 危険 audio cd tools - Audio CD Ripper OCX ActiveX コントロールの Init 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2603 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311 9.6 CRITICAL
Network 		- - NuGet Gallery is a package repository that powers nuget.org. A security vulnerability exists in the NuGetGallery backend job’s handling of .nuspec files within NuGet packages. An attacker can supply … Update CWE-20
CWE-22
 Improper Input Validation 
Path Traversal 		CVE-2026-39399 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
312 9.9 CRITICAL
Network 		- - OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the serve… Update CWE-94
CWE-917
Code Injection
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2026-39842 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
313 8.1 HIGH
Network 		- - An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authen… Update CWE-863
 Incorrect Authorization 		CVE-2025-40897 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
314 8.9 HIGH
Network 		- - A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter. An authenticated user with custom fields privileges … Update CWE-79
Cross-site Scripting 		CVE-2025-40899 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
315 8.3 HIGH
Network 		- - mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior contain an argument injection vulnerability in the port_forward tool in src/tools/… Update CWE-88
Argument Injection 		CVE-2026-39884 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
316 6.9 MEDIUM
Network 		- - Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the serendipity_setCookie() function in include/functions_config.inc.php uses $_SERVER['HTTP_HOST'] without validation as… Update CWE-565
 Reliance on Cookies without Validation and Integrity Checking 		CVE-2026-39963 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
317 7.2 HIGH
Network 		- - Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php inserts $_SERVER['HTTP_HOST'] directly into the Message-ID SM… Update CWE-113
HTTP Response Splitting 		CVE-2026-39971 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
318 5.5 MEDIUM
Local 		- - Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimest… Update CWE-295
Improper Certificate Validation  		CVE-2026-39984 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
319 7.1 HIGH
Network 		- - Zarf is an Airgap Native Packager Manager for Kubernetes. Versions 0.23.0 through 0.74.1 contain an arbitrary file write vulnerability in the zarf package inspect sbom and zarf package inspect docume… Update CWE-22
Path Traversal 		CVE-2026-40090 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm
320 - - - Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBl… Update CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2025-14813 2026-04-18 00:38 2026-04-15 Show GitHub Exploit DB Packet Storm