Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249931 5 警告 GNU Project - GNU C Library の regcomp 実装におけるスタック消費の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4052 2011-01-21 16:37 2011-01-13 Show GitHub Exploit DB Packet Storm
249932 5 警告 GNU Project - GNU C Library の regcomp 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4051 2011-01-21 16:35 2011-01-13 Show GitHub Exploit DB Packet Storm
249933 - - (複数のベンダ) - 侵入検知システム (IDS) および侵入防止システム (IPS) の機能を回避可能な問題 - - 2011-01-21 16:30 2010-12-16 Show GitHub Exploit DB Packet Storm
249934 6.9 警告 Ecava - Ecava IntegraXor における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-4599 2011-01-21 15:52 2010-12-17 Show GitHub Exploit DB Packet Storm
249935 5 警告 Ecava - Ecava IntegraXor におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4598 2011-01-21 15:38 2011-01-12 Show GitHub Exploit DB Packet Storm
249936 6.8 警告 Lunascape - Lunascape における DLL 読み込みに関する脆弱性 CWE-Other
その他
CVE-2010-3927 2011-01-21 11:02 2011-01-21 Show GitHub Exploit DB Packet Storm
249937 7.8 危険 シスコシステムズ - Cisco Linksys WRT54GC におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0352 2011-01-21 11:02 2011-01-21 Show GitHub Exploit DB Packet Storm
249938 9.3 危険 マイクロソフト - Microsoft WMI Administrative Tools の WBEMSingleView.ocx ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4588 2011-01-20 13:58 2010-12-23 Show GitHub Exploit DB Packet Storm
249939 5.8 警告 Mozilla Foundation
オラクル
- 複数の Mozilla 製品の Math.random 関数におけるユーザを追跡される脆弱性 CWE-310
暗号の問題
CVE-2010-3171 2011-01-20 13:51 2010-06-22 Show GitHub Exploit DB Packet Storm
249940 4.3 警告 Git project
レッドハット
- Git の Gitweb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3906 2011-01-20 13:47 2010-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
341 5.0 MEDIUM
Network
- - Weblate is a web based localization tool. In versions prior to 5.17, repository-boundary validation relies on string prefix checks on resolved absolute paths. In multiple code paths, the check uses s… Update CWE-22
Path Traversal
CVE-2026-40256 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
342 7.8 HIGH
Local
- - Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on th… Update CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-22676 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
343 9.4 CRITICAL
Network
- - Dgraph is an open source distributed GraphQL database. Versions 25.3.1 and prior contain an unauthenticated credential disclosure vulnerability where the /debug/pprof/cmdline endpoint is registered o… Update CWE-200
CWE-215
Information Exposure
 Insertion of Sensitive Information Into Debugging Code
CVE-2026-40173 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
344 - - - Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role. Update CWE-80
Basic XSS
CVE-2026-1564 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
345 - - - Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role. Update CWE-79
Cross-site Scripting
CVE-2026-1711 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
346 6.8 MEDIUM
Network
- - ProcessWire CMS version 3.0.255 and prior contain a server-side request forgery vulnerability in the admin panel's 'Add Module From URL' feature that allows authenticated administrators to supply arb… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-40500 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
347 9.1 CRITICAL
Network
- - A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace bound… Update CWE-1220
 Insufficient Granularity of Access Control
CVE-2026-6388 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
348 7.8 HIGH
Local
- - Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::generateP4Command() method, which constructs she… Update CWE-20
CWE-78
 Improper Input Validation 
OS Command 
CVE-2026-40176 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
349 6.1 MEDIUM
Network
- - ApostropheCMS is an open-source Node.js content management system. A regression introduced in commit 49d0bb7, included in versions 2.17.1 of the ApostropheCMS-maintained sanitize-html package bypasse… Update CWE-79
Cross-site Scripting
CVE-2026-40186 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
350 8.8 HIGH
Network
- - Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase() method, which appends the $source… Update CWE-20
CWE-78
 Improper Input Validation 
OS Command 
CVE-2026-40261 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm