Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 27, 2026, 8:58 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251941 6 警告 VMware - VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-2667 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
251942 4.4 警告 VMware - VMware Studio における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2427 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
251943 6.8 警告 VMware - VMware SpringSource tc Server Runtime における JMX インターフェイスへのアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-1454 2010-09-13 16:05 2010-05-13 Show GitHub Exploit DB Packet Storm
251944 4.3 警告 VMware - VMware View におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1143 2010-09-13 16:04 2010-05-5 Show GitHub Exploit DB Packet Storm
251945 4.9 警告 VMware - 複数の VMware 製品の hcmon.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3761 2010-09-13 16:04 2008-08-21 Show GitHub Exploit DB Packet Storm
251946 2.1 注意 VMware - VMware VirtualCenter におけるパスワードを盗まれる脆弱性 CWE-200
情報漏えい
CVE-2008-4278 2010-09-13 16:04 2008-10-3 Show GitHub Exploit DB Packet Storm
251947 5 警告 VMware - VMware VirtualCenter における他のシステムユーザに権限を割り当てられる脆弱性 CWE-200
情報漏えい
CVE-2008-3514 2010-09-13 16:03 2008-08-12 Show GitHub Exploit DB Packet Storm
251948 5 警告 VMware - VMware Server の ISAPI 拡張におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-3697 2010-09-13 16:02 2008-08-29 Show GitHub Exploit DB Packet Storm
251949 6.9 警告 VMware - 複数の VMware 製品の vmware-authd における権限を取得される脆弱性 CWE-Other
その他
CVE-2008-0967 2010-09-13 16:02 2008-06-4 Show GitHub Exploit DB Packet Storm
251950 7.2 危険 VMware - 複数の VMware 製品におけるメモリ破損の脆弱性 CWE-399
リソース管理の問題
CVE-2008-4917 2010-09-13 16:01 2008-12-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 27, 2026, 1:20 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1 7.3 HIGH
Network
- - A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /execute.php. This manipulation of the argument code causes sql injection. The attac… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7073 2026-04-27 10:16 2026-04-27 Show GitHub Exploit DB Packet Storm
2 7.3 HIGH
Network
- - A vulnerability was detected in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Usern… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7072 2026-04-27 10:16 2026-04-27 Show GitHub Exploit DB Packet Storm
3 5.3 MEDIUM
Network
- - A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/user-cvs/. The manipulation leads to file … New CWE-200
CWE-538
Information Exposure
 File and Directory Information Exposure
CVE-2026-7071 2026-04-27 10:16 2026-04-27 Show GitHub Exploit DB Packet Storm
4 7.3 HIGH
Network
- - A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to … New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7070 2026-04-27 10:16 2026-04-27 Show GitHub Exploit DB Packet Storm
5 8.0 HIGH
Adjacent
- - A security flaw has been discovered in D-Link DIR-825 up to 3.00b32. This impacts the function AddPortMapping of the file upnpsoap.c of the component miniupnpd. Performing a manipulation of the argum… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7069 2026-04-27 09:16 2026-04-27 Show GitHub Exploit DB Packet Storm
6 8.8 HIGH
Adjacent
- - A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such manipulation leads to buffer overflow. The attack ca… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7068 2026-04-27 09:16 2026-04-27 Show GitHub Exploit DB Packet Storm
7 7.3 HIGH
Network
- - A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the argumen… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7067 2026-04-27 09:16 2026-04-27 Show GitHub Exploit DB Packet Storm
8 7.3 HIGH
Network
- - A vulnerability was found in choieastsea simple-openstack-mcp up to 767b2f4a8154cca344344b9725537a58399e6036. The affected element is the function exec_openstack of the file server.py. The manipulati… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7066 2026-04-27 09:16 2026-04-27 Show GitHub Exploit DB Packet Storm
9 7.3 HIGH
Network
- - A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the function uploadRemoteFile of the file packages/core/src/modules/upload/services/file-storage.service.ts of the comp… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7065 2026-04-27 09:16 2026-04-27 Show GitHub Exploit DB Packet Storm
10 9.3 CRITICAL
Network
- - An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An att… New CWE-656
 Reliance on Security Through Obscurity
CVE-2026-42363 2026-04-27 09:16 2026-04-27 Show GitHub Exploit DB Packet Storm