Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251121	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0049	2010-07-13 16:33	2010-03-15	Show	GitHub Exploit DB Packet Storm

251122	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0048	2010-07-13 16:33	2010-03-15	Show	GitHub Exploit DB Packet Storm

251123	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0047	2010-07-13 16:31	2010-03-15	Show	GitHub Exploit DB Packet Storm

251124	9.3	危険	アップル	-	Apple Safari の Cascading Style Sheet 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0046	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

251125	9.3	危険	アップル	-	Apple Safari の ImageIO における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0043	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

251126	4.3	警告	アップル	-	Apple Safari の ImageIO における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0041	2010-07-13 16:29	2010-03-15	Show	GitHub Exploit DB Packet Storm

251127	6.8	警告	アップルサイバートラスト株式会社 Mozilla Foundation レッドハット	-	libc における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0689	2010-07-13 16:28	2009-07-1	Show	GitHub Exploit DB Packet Storm

251128	6.8	警告	アップル	-	WebKit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2816	2010-07-13 16:28	2009-11-11	Show	GitHub Exploit DB Packet Storm

251129	9.3	危険	アップル	-	Apple Safari の WebKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2195	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

251130	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml の Notation または Enumeration 属性タイプの処理におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2416	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1931	-		-	-	Missing Authorization vulnerability in Rustaurius Order Tracking order-tracking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Tracking: from n/a thr…	CWE-862 Missing Authorization	CVE-2026-39602	2026-04-14 05:16	2026-04-8	Show	GitHub Exploit DB Packet Storm

1932	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This…	CWE-79 Cross-site Scripting	CVE-2026-39500	2026-04-14 05:16	2026-04-8	Show	GitHub Exploit DB Packet Storm

1933	7.6	HIGH Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue affects YayMail: from n/a throu…	CWE-89 SQL Injection	CVE-2026-39496	2026-04-14 05:16	2026-04-8	Show	GitHub Exploit DB Packet Storm

1934	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress Post Expirator post-expirator allows DOM-Based XSS.This issue affects Post Expirator…	CWE-79 Cross-site Scripting	CVE-2026-39482	2026-04-14 05:16	2026-04-8	Show	GitHub Exploit DB Packet Storm

1935	9.8	CRITICAL Network	-	-	Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in authentication helper execution where helper configuration values are executed using shell=true without…	CWE-78 OS Command	CVE-2026-35022	2026-04-14 05:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

1936	7.8	HIGH Local	-	-	Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the prompt editor invocation utility that allows attackers to execute arbitrary commands by crafting ma…	CWE-78 OS Command	CVE-2026-35021	2026-04-14 05:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

1937	8.4	HIGH Local	-	-	Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the command lookup helper and deep-link terminal launcher that allows local attackers to execute arbitr…	CWE-78 OS Command	CVE-2026-35020	2026-04-14 05:16	2026-04-7	Show	GitHub Exploit DB Packet Storm

1938	4.7	MEDIUM Local	amd	athlon_x4_750_firmware athlon_x4_760k_firmware athlon_x4_830_firmware athlon_x4_840_firmware athlon_x4_860k_firmware athlon_x4_870k_firmware athlon_x4_880k_firmware athlon_x4_835…	When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.	NVD-CWE-noinfo	CVE-2022-27672	2026-04-14 05:16	2023-03-1	Show	GitHub Exploit DB Packet Storm

1939	3.1	LOW Network	libssh redhat	libssh enterprise_linux	A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listin…	CWE-476 NULL Pointer Dereference	CVE-2026-0968	2026-04-14 05:15	2026-03-27	Show	GitHub Exploit DB Packet Storm

1940	3.1	LOW Network	libssh redhat	libssh enterprise_linux	Se encontró una falla en libssh en la que un servidor SFTP (Protocolo de Transferencia de Archivos SSH) malicioso puede explotar esto enviando un campo 'longname' malformado dentro de un mensaje 'SSH…	CWE-476 NULL Pointer Dereference	CVE-2026-0968	2026-04-14 05:15	2026-03-27	Show	GitHub Exploit DB Packet Storm