Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242141 7.5 危険 article system - Article System における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0314 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242142 9 危険 gonicus - Gosa における特定の設定を修正される脆弱性 - CVE-2007-0313 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242143 5 警告 BMC Software - BMC Remedy Action Request System における有効なアカウント名を特定される脆弱性 - CVE-2007-0310 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242144 7.5 危険 francisco burzi - Francisco Burzi PHP-Nuke の blocks/block-Old_Articles.php における SQL インジェクションの脆弱性 - CVE-2007-0309 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242145 7.5 危険 digiappz - Digiappz DigiAffiliate の visu_user.asp における SQL インジェクションの脆弱性 - CVE-2007-0306 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242146 6.8 警告 fdweb - FdWeB Espace Membre の _admin/admin_menu.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0301 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242147 7.1 危険 アップル - Mac OS X の byte_swap_sbin 関数における整数オーバーフローの脆弱性 - CVE-2007-0299 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242148 6.8 警告 dexxaboy - LunarPoll の show.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0298 2012-06-26 15:46 2007-01-17 Show GitHub Exploit DB Packet Storm
242149 6.6 警告 アップル
FreeBSD
- Mac OS X および FreeBSD カーネルの ufs_lookup 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2007-0267 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
242150 7.5 危険 ezboxx - Ezboxx Portal System Beta の boxx/showAppendix.asp における SQL インジェクションの脆弱性 - CVE-2007-0266 2012-06-26 15:46 2007-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
101 8.5 HIGH
Network
b3log siyuan SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and prior, the /api/av/removeUnusedAttributeView endpoint constructs a filesystem path using the user-controlled id pa… Update CWE-24
 Path Traversal: '../filedir'
CVE-2026-40318 2026-04-21 01:50 2026-04-17 Show GitHub Exploit DB Packet Storm
102 8.1 HIGH
Network
b3log siyuan SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, the /api/av/removeUnusedAttributeView endpoint is protected only by generic authentication that accepts pub… Update CWE-285
Improper Authorization
CVE-2026-40259 2026-04-21 01:49 2026-04-17 Show GitHub Exploit DB Packet Storm
103 8.4 HIGH
Local
microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_…
Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally. Update CWE-349
 Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-32162 2026-04-21 01:48 2026-04-15 Show GitHub Exploit DB Packet Storm
104 7.5 HIGH
Network
apache skywalking The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recom… Update CWE-202
 Exposure of Sensitive Information Through Data Queries
CVE-2026-30778 2026-04-21 01:46 2026-04-15 Show GitHub Exploit DB Packet Storm
105 8.8 HIGH
Network
dataease dataease DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below ship the legacy velocity-1.7.jar, which pulls in commons-collections-3.2.1.jar containing the InvokerT… Update CWE-502
 Deserialization of Untrusted Data
CVE-2026-40901 2026-04-21 01:46 2026-04-17 Show GitHub Exploit DB Packet Storm
106 8.8 HIGH
Network
dataease dataease DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the /de2api/datasetData/previewSql endpoint. The user-supplie… Update CWE-89
SQL Injection
CVE-2026-40900 2026-04-21 01:46 2026-04-17 Show GitHub Exploit DB Packet Storm
107 7.1 HIGH
Network
apache skywalking_mcp Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-34476 2026-04-21 01:45 2026-04-13 Show GitHub Exploit DB Packet Storm
108 7.8 HIGH
Local
microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally. Update CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2026-32163 2026-04-21 01:44 2026-04-15 Show GitHub Exploit DB Packet Storm
109 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2016
windows_server_2019
w…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally. Update CWE-362
Race Condition
CVE-2026-32164 2026-04-21 01:43 2026-04-15 Show GitHub Exploit DB Packet Storm
110 6.5 MEDIUM
Network
dataease dataease DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a JDBC parameter blocklist bypass vulnerability in the MySQL datasource configuration. The Mys… Update CWE-183
 Permissive List of Allowed Inputs
CVE-2026-40899 2026-04-21 01:42 2026-04-17 Show GitHub Exploit DB Packet Storm