Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251911 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251912 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251913 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251914 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
251915 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
251916 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
251917 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2861 9.9 CRITICAL
Network 		- - Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Side Request Forgery (SSRF) vulnerability in its API … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-40089 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2862 8.6 HIGH
Network 		- - A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas… CWE-306
Missing Authentication for Critical Function 		CVE-2026-4436 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2863 7.3 HIGH
Network 		- - A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library metagpt/tools/libs/terminal.py. The manipulation leads to o… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-5972 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2864 7.3 HIGH
Network 		- - A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The manipulation results in os command injection. The at… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-5973 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2865 7.3 HIGH
Network 		- - A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os comman… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-5974 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2866 9.8 CRITICAL
Network 		- - A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulatio… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-5975 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2867 9.8 CRITICAL
Network 		- - A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manip… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-5976 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2868 8.1 HIGH
Network 		- - nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In 1.3.0 and earlier, block timestamp validation enforces that timestamp >= parent.timestamp for non-skip blocks an… CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-40093 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2869 - - - In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt is stateless and passes the caller-suppl… CWE-323
 Reusing a Nonce, Key Pair in Encryption 		CVE-2026-5446 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm
2870 - - - Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally due to incorrect size handling of the Aut… CWE-122
Heap-based Buffer Overflow 		CVE-2026-5447 2026-04-14 00:02 2026-04-10 Show GitHub Exploit DB Packet Storm