Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251081 7.9 危険 日本電気
サイバートラスト株式会社
MIT Kerberos
ヒューレット・パッカード
ターボリナックス
レッドハット		 - MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性 - CVE-2007-2443 2010-07-15 17:19 2007-06-26 Show GitHub Exploit DB Packet Storm
251082 9.3 危険 日本電気
サイバートラスト株式会社
MIT Kerberos
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット		 - MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性 - CVE-2007-2442 2010-07-15 17:19 2007-06-26 Show GitHub Exploit DB Packet Storm
251083 4.3 警告 VMware - 複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2277 2010-07-14 17:27 2010-03-29 Show GitHub Exploit DB Packet Storm
251084 6.9 警告 VMware - 複数の VMware 製品の USB サービス における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1140 2010-07-14 17:27 2010-04-9 Show GitHub Exploit DB Packet Storm
251085 9.3 危険 シマンテック - Symantec Workspace Streaming (旧 Symantec AppStream) に脆弱性 CWE-287
不適切な認証 		CVE-2008-4389 2010-07-14 17:26 2010-06-22 Show GitHub Exploit DB Packet Storm
251086 5.8 警告 アップル - Apple iOS の設定アプリケーションにおけるユーザを追跡可能な脆弱性 CWE-DesignError
CVE-2010-1756 2010-07-14 17:26 2010-06-22 Show GitHub Exploit DB Packet Storm
251087 4.3 警告 アップル - Apple iOS の Safari におけるリモートの Web サーバがユーザを追跡可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1755 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
251088 1.9 注意 アップル - Apple iOS の パスコードロックにおける任意のデータにアクセスされる脆弱性 CWE-362
競合状態 		CVE-2010-1775 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
251089 6.9 警告 アップル - Apple iOS の パスコードロックにおけるパスコード要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1754 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
251090 6.8 警告 アップル - Apple iOS の ImageIO における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1753 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. CWE-59
CWE-269
Link Following
 Improper Privilege Management 		CVE-2026-32212 2026-04-20 23:55 2026-04-15 Show GitHub Exploit DB Packet Storm
152 9.0 CRITICAL
Network 		b3log siyuan SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, Mermaid diagrams are rendered with securityLevel set to "loose", and the resulting SVG is injected into the… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-40322 2026-04-20 23:51 2026-04-17 Show GitHub Exploit DB Packet Storm
153 7.2 HIGH
Network 		cubecart cubecart An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command. CWE-78
OS Command  		CVE-2026-21719 2026-04-20 23:45 2026-04-17 Show GitHub Exploit DB Packet Storm
154 9.8 CRITICAL
Network 		cubecart cubecart An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product. CWE-89
SQL Injection 		CVE-2026-34018 2026-04-20 23:44 2026-04-17 Show GitHub Exploit DB Packet Storm
155 5.5 MEDIUM
Local 		microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w… 		Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. CWE-284
Improper Access Control 		CVE-2026-32214 2026-04-20 23:43 2026-04-15 Show GitHub Exploit DB Packet Storm
156 2.7 LOW
Network 		cubecart cubecart A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be accessible. CWE-22
Path Traversal 		CVE-2026-35496 2026-04-20 23:43 2026-04-17 Show GitHub Exploit DB Packet Storm
157 6.5 MEDIUM
Network 		pac4j pac4j PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site requ… CWE-352
 Origin Validation Error 		CVE-2026-40458 2026-04-20 23:41 2026-04-17 Show GitHub Exploit DB Packet Storm
158 8.8 HIGH
Network 		pac4j pac4j PAC4J is vulnerable to LDAP Injection in multiple methods. A low-privileged remote attacker can inject crafted LDAP syntax into ID-based search parameters, potentially resulting in unauthorized LDAP … CWE-90
LDAP Injection 		CVE-2026-40459 2026-04-20 23:38 2026-04-17 Show GitHub Exploit DB Packet Storm
159 5.5 MEDIUM
Local 		microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_… 		Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-32215 2026-04-20 23:35 2026-04-15 Show GitHub Exploit DB Packet Storm
160 5.5 MEDIUM
Local 		microsoft windows_11_26h1 Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally. CWE-476
 NULL Pointer Dereference 		CVE-2026-32216 2026-04-20 23:34 2026-04-15 Show GitHub Exploit DB Packet Storm