Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247841 4.3 警告 VMware - VMware vCenter の vCenter Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0426 2012-03-27 18:42 2011-05-5 Show GitHub Exploit DB Packet Storm
247842 7.5 危険 PolyVision - PolyVision RoomWizard におけるコンソールアクセスを取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-0423 2012-03-27 18:42 2011-01-11 Show GitHub Exploit DB Packet Storm
247843 4 警告 pureftpd
NetBSD
- Pure-FTPd および NetBSD の glob 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-0418 2012-03-27 18:42 2011-05-24 Show GitHub Exploit DB Packet Storm
247844 7.5 危険 phenotype-cms - Phenotype CMS の store 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0407 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
247845 6.8 警告 phpgedview - PhpGedView の module.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0405 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
247846 7.5 危険 netsupport - NetSupport Manager Agent におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0404 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
247847 9.3 危険 imgburn - ImgBurn の ImgBurn.exe における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2011-0403 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
247848 6.8 警告 Debian - dpkg の dpkg-source における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2011-0402 2012-03-27 18:42 2011-01-6 Show GitHub Exploit DB Packet Storm
247849 5 警告 Piwik - Piwik におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0401 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
247850 5 警告 Piwik - Piwik の Cookie.php におけるクッキーをキャプチャされる脆弱性 CWE-16
環境設定
CVE-2011-0400 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
761 7.8 HIGH
Local
- - Notepad Next is a cross-platform, reimplementation of Notepad++. Prior to version 0.14, NotepadNext's detectLanguageFromExtension() function interpolates a file's extension directly into a Lua script… New CWE-94
Code Injection
CVE-2026-42214 2026-05-8 05:16 2026-05-8 Show GitHub Exploit DB Packet Storm
762 7.6 HIGH
Network
- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user with updateAutoReply permission can store an XSS payload in the mailbox auto-reply … New CWE-79
Cross-site Scripting
CVE-2026-41904 2026-05-8 05:16 2026-05-8 Show GitHub Exploit DB Packet Storm
763 9.8 CRITICAL
Network
hcltech dfxanalytics HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and … Update NVD-CWE-noinfo
CVE-2025-59851 2026-05-8 05:04 2026-05-6 Show GitHub Exploit DB Packet Storm
764 9.1 CRITICAL
Network
hcltech dfxanalytics HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise t… Update CWE-319
Cleartext Transmission of Sensitive Information
CVE-2025-59852 2026-05-8 05:03 2026-05-6 Show GitHub Exploit DB Packet Storm
765 5.3 MEDIUM
Network
hcltech dfxanalytics HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow an attacker to gain insights into the appl… Update CWE-209
Information Exposure Through an Error Message
CVE-2025-59853 2026-05-8 05:03 2026-05-6 Show GitHub Exploit DB Packet Storm
766 6.1 MEDIUM
Network
hcltech dfxanalytics HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit b… Update CWE-80
CWE-79
Basic XSS
Cross-site Scripting
CVE-2025-59854 2026-05-8 05:02 2026-05-6 Show GitHub Exploit DB Packet Storm
767 6.5 MEDIUM
Local
sandboxie-plus sandboxie Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivilege… Update CWE-20
 Improper Input Validation 
CVE-2026-32603 2026-05-8 05:02 2026-05-6 Show GitHub Exploit DB Packet Storm
768 6.1 MEDIUM
Network
hcltech dfxanalytics HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could al… Update CWE-358
CWE-79
 Improperly Implemented Security Check for Standard
Cross-site Scripting
CVE-2025-31970 2026-05-8 04:58 2026-05-6 Show GitHub Exploit DB Packet Storm
769 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member The counter driver can use HW channels 1 and 2, while the PW… Update NVD-CWE-noinfo
CVE-2026-31740 2026-05-8 04:56 2026-05-2 Show GitHub Exploit DB Packet Storm
770 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: counter: rz-mtu3-cnt: prevent counter from being toggled multiple times Runtime PM counter is incremented / decremented each time… Update NVD-CWE-Other
CVE-2026-31741 2026-05-8 04:55 2026-05-2 Show GitHub Exploit DB Packet Storm