Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251611 6.5 警告 サイバートラスト株式会社
Linux
レッドハット		 - KVM の x86 エミュレータにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0298 2010-03-16 11:13 2010-02-9 Show GitHub Exploit DB Packet Storm
251612 4.4 警告 サイバートラスト株式会社
Fabrice Bellard
レッドハット		 - QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0297 2010-03-16 11:13 2010-02-9 Show GitHub Exploit DB Packet Storm
251613 6.8 警告 サン・マイクロシステムズ
freedesktop.org		 - Poppler における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3605 2010-03-15 16:40 2009-11-2 Show GitHub Exploit DB Packet Storm
251614 4.1 警告 Linux
レッドハット		 - Linux kernel の smbfs に関する脆弱性 - CVE-2006-5871 2010-03-15 16:40 2005-10-5 Show GitHub Exploit DB Packet Storm
251615 7.8 危険 Linux
レッドハット		 - Linux kernel の selinux_parse_skb_ipv6 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2005-4886 2010-03-15 16:40 2005-10-5 Show GitHub Exploit DB Packet Storm
251616 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2003-1589 2010-03-15 16:39 2003-12-2 Show GitHub Exploit DB Packet Storm
251617 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2003-1590 2010-03-15 16:39 2003-08-13 Show GitHub Exploit DB Packet Storm
251618 7.1 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の handle_dr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3722 2010-03-15 15:23 2009-10-30 Show GitHub Exploit DB Packet Storm
251619 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4406 2010-03-12 15:13 2009-12-23 Show GitHub Exploit DB Packet Storm
251620 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Network Management Card におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1798 2010-03-12 15:13 2009-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1821 5.3 MEDIUM
Network 		- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-39536 2026-04-14 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1822 4.9 MEDIUM
Network 		- - Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through <= 4.3.1. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-39521 2026-04-14 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
1823 4.1 MEDIUM
Network 		- - Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCalendar VTODO entries via raw string concatenation without applying RFC 5545 TEXT … CWE-93
CRLF Injection 		CVE-2026-35601 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
1824 5.9 MEDIUM
Network 		- - Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the TOTP failed-attempt lockout mechanism is non-functional due to a database transaction handling bug. When a TOTP val… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-35597 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
1825 7.4 HIGH
Network 		- - Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the OIDC callback handler issues a full JWT token without checking whether the matched user has TOTP two-factor authent… CWE-287
Improper Authentication 		CVE-2026-34727 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
1826 7.1 HIGH
Network 		- - Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-34476 2026-04-14 01:16 2026-04-13 Show GitHub Exploit DB Packet Storm
1827 7.1 HIGH
Network 		- - Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook result view page allows any authenticated teach… CWE-476
CWE-639
 NULL Pointer Dereference
 Authorization Bypass Through User-Controlled Key 		CVE-2026-32894 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
1828 8.3 HIGH
Network 		- - Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $_REQUEST['test'] is conca… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-31939 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
1829 6.1 MEDIUM
Network 		apache skywalking Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <= 10.2.0. Users are recommended to upgrade t… CWE-80
Basic XSS 		CVE-2025-54057 2026-04-14 01:16 2025-11-27 Show GitHub Exploit DB Packet Storm
1830 9.8 CRITICAL
Network 		samsung exynos_990_firmware
exynos_980_firmware
exynos_850_firmware
exynos_1080_firmware
exynos_1280_firmware
exynos_1330_firmware
exynos_1380_firmware
exynos_1480_firmware
exynos_158… 		An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 512… CWE-787
 Out-of-bounds Write 		CVE-2025-62818 2026-04-14 00:31 2026-04-8 Show GitHub Exploit DB Packet Storm