Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250171	9.3	危険	アップル	-	Apple Safari の WebKit 内にある JavaScript 実装における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3805	2010-12-15 14:32	2010-11-22	Show	GitHub Exploit DB Packet Storm

250172	5	警告	アップル	-	Apple Safari の WebKit 内にある JavaScript 実装におけるユーザを追跡可能な脆弱性	CWE-310 暗号の問題	CVE-2010-3804	2010-12-15 14:29	2010-11-22	Show	GitHub Exploit DB Packet Storm

250173	9.3	危険	アップル	-	Apple Safari の WebKit における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3803	2010-12-15 14:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

250174	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3348	2010-12-15 14:08	2010-12-15	Show	GitHub Exploit DB Packet Storm

250175	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:07	2010-12-15	Show	GitHub Exploit DB Packet Storm

250176	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:05	2010-12-15	Show	GitHub Exploit DB Packet Storm

250177	4.3	警告	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:03	2010-12-15	Show	GitHub Exploit DB Packet Storm

250178	7.5	危険	Samba Project アップルサイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Samba の chain_reply 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2063	2010-12-15 12:51	2010-06-16	Show	GitHub Exploit DB Packet Storm

250179	7.5	危険	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache HTTP Server の mod_proxy_ftp モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3095	2010-12-15 12:45	2009-09-8	Show	GitHub Exploit DB Packet Storm

250180	5.4	警告	IBM Apache Software Foundation 富士通サイバートラスト株式会社ヒューレット・パッカードターボリナックスオラクルレッドハット	-	Apache HTTP Server の ap_proxy_ftp_handler 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-3094	2010-12-15 12:44	2009-09-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311	-		-	-	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). Non-constant time comparisons risk private key leakage in FrodoKEM. This issue affects BC… New	CWE-385 Covert Timing Channel	CVE-2026-5598	2026-04-18 00:38	2026-04-15	Show	GitHub Exploit DB Packet Storm

312	7.5	HIGH Network	-	-	An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET reque… New	CWE-22 Path Traversal	CVE-2026-30996	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

313	7.4	HIGH Network	-	-	Git for Windows is the Windows port of Git. Versions prior to 2.53.0.windows.3 do not have protections that prevent attackers from obtaining a user's NTLM hash. The NTLM hash can be obtained by trick… New	CWE-200 Information Exposure	CVE-2026-32631	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

314	3.1	LOW Network	-	-	Weblate is a web based localization tool. In versions prior to 5.17, the tasks API didn't verify user access for pending tasks. This could expose logs of in-progress operations to users who don't hav… New	CWE-284 Improper Access Control	CVE-2026-33212	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

315	4.3	MEDIUM Network	-	-	Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't enforce proper access control. This issue has been f… New	CWE-862 Missing Authorization	CVE-2026-33214	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

316	8.0	HIGH Network	-	-	Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token. This allows an authenticated GUI user with acces… New	CWE-863 Incorrect Authorization	CVE-2026-6290	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

317	6.8	MEDIUM Network	-	-	Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't perform proper access control. This issue has been f… New	CWE-22 CWE-200 Path Traversal Information Exposure	CVE-2026-33220	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

318	8.0	HIGH Network	-	-	Weblate is a web based localization tool. In versions prior to 5.17, the project backup didn't filter Git and Mercurial configuration files which could lead to remote code execution under certain cir… New	CWE-23 CWE-94 CWE-434 Relative Path Traversal Code Injection Unrestricted Upload of File with Dangerous Type	CVE-2026-33435	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

319	5.0	MEDIUM Network	-	-	Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-33440	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

320	7.4	HIGH Network	-	-	OpenProject is an open-source project management application. In versions prior to 17.3.0, 2FA OTP verification in the confirm_otp action of the two_factor_authentication module has no rate limiting,… New	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2026-33667	2026-04-18 00:38	2026-04-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed