Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242091 8.5 危険 Drupal - Drupal 用の Project issue tracking モジュールにおける任意のコードを実行される脆弱性 - CVE-2007-0505 2012-06-26 15:46 2007-01-23 Show GitHub Exploit DB Packet Storm
242092 7.5 危険 bradabra - Bradabra の include/includes.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0500 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
242093 7.5 危険 enthusiast - Enthusiast における SQL インジェクションの脆弱性 - CVE-2007-0484 2012-06-26 15:46 2007-01-24 Show GitHub Exploit DB Packet Storm
242094 6.8 警告 enthusiast - Enthusiast におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0483 2012-06-26 15:46 2007-01-24 Show GitHub Exploit DB Packet Storm
242095 4.3 警告 アップル - Safari で使用される WebCore におけるクロスサイトスクリプティング攻撃を誘発される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-0478 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
242096 4.6 警告 Gentoo Linux - Gentoo Linux の gencert.sh スクリプトにおける任意のファイルを上書きされる脆弱性 - CVE-2007-0476 2012-06-26 15:46 2007-01-23 Show GitHub Exploit DB Packet Storm
242097 5 警告 アップル - Apple Software Update におけるフォーマットストリングの脆弱性 - CVE-2007-0463 2012-06-26 15:46 2007-01-29 Show GitHub Exploit DB Packet Storm
242098 10 危険 アップル - Mac OS X の Quicktime などの _GetSrcBits32ARGB 関数におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0462 2012-06-26 15:46 2007-01-25 Show GitHub Exploit DB Packet Storm
242099 5 警告 dazuko - Dazuko anti-virus helper モジュールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0461 2012-06-26 15:46 2007-01-23 Show GitHub Exploit DB Packet Storm
242100 10 危険 CA Technologies - 複数の CA 製品 の LGSERVER.EXE におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0449 2012-06-26 15:46 2007-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Update CWE-59
CWE-269
Link Following
 Improper Privilege Management 		CVE-2026-32212 2026-04-20 23:55 2026-04-15 Show GitHub Exploit DB Packet Storm
152 9.0 CRITICAL
Network 		b3log siyuan SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, Mermaid diagrams are rendered with securityLevel set to "loose", and the resulting SVG is injected into the… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-40322 2026-04-20 23:51 2026-04-17 Show GitHub Exploit DB Packet Storm
153 7.2 HIGH
Network 		cubecart cubecart An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command. New CWE-78
OS Command  		CVE-2026-21719 2026-04-20 23:45 2026-04-17 Show GitHub Exploit DB Packet Storm
154 9.8 CRITICAL
Network 		cubecart cubecart An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product. New CWE-89
SQL Injection 		CVE-2026-34018 2026-04-20 23:44 2026-04-17 Show GitHub Exploit DB Packet Storm
155 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Update CWE-284
Improper Access Control 		CVE-2026-32214 2026-04-20 23:43 2026-04-15 Show GitHub Exploit DB Packet Storm
156 2.7 LOW
Network 		cubecart cubecart A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be accessible. New CWE-22
Path Traversal 		CVE-2026-35496 2026-04-20 23:43 2026-04-17 Show GitHub Exploit DB Packet Storm
157 6.5 MEDIUM
Network 		pac4j pac4j PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site requ… New CWE-352
 Origin Validation Error 		CVE-2026-40458 2026-04-20 23:41 2026-04-17 Show GitHub Exploit DB Packet Storm
158 8.8 HIGH
Network 		pac4j pac4j PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP … New CWE-90
LDAP Injection 		CVE-2026-40459 2026-04-20 23:38 2026-04-17 Show GitHub Exploit DB Packet Storm
159 5.5 MEDIUM
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_… 		Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. Update CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-32215 2026-04-20 23:35 2026-04-15 Show GitHub Exploit DB Packet Storm
160 5.5 MEDIUM
Local 		microsoft windows_11_26h1 Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally. Update CWE-476
 NULL Pointer Dereference 		CVE-2026-32216 2026-04-20 23:34 2026-04-15 Show GitHub Exploit DB Packet Storm