Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252771 4 警告 ISC, Inc.
IBM
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット
- BIND 9 の DNSSEC 検証処理における脆弱性 CWE-noinfo
情報不足
CVE-2009-4022 2010-10-1 17:39 2009-12-2 Show GitHub Exploit DB Packet Storm
252772 4 警告 ISC, Inc.
サイバートラスト株式会社
ターボリナックス
ヒューレット・パッカード
レッドハット
- ISC BIND における DNS キャッシュ汚染の脆弱性 CWE-noinfo
情報不足
CVE-2010-0290 2010-10-1 17:39 2010-01-22 Show GitHub Exploit DB Packet Storm
252773 7.6 危険 ISC, Inc.
ヒューレット・パッカード
- ISC BIND における処理範囲外のデータ処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-0382 2010-10-1 17:38 2010-01-22 Show GitHub Exploit DB Packet Storm
252774 9 危険 日立 - Groupmax Scheduler Server における複数の脆弱性 CWE-noinfo
情報不足
- 2010-10-1 17:37 2010-09-6 Show GitHub Exploit DB Packet Storm
252775 5.8 警告 富士通
アクセラテクノロジ
- Accela BizSearch の文書参照画面におけるフィッシング脅威の脆弱性 CWE-noinfo
情報不足
- 2010-10-1 17:37 2010-09-2 Show GitHub Exploit DB Packet Storm
252776 9.3 危険 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2010-3131 2010-10-1 17:31 2010-09-7 Show GitHub Exploit DB Packet Storm
252777 9.3 危険 Mozilla Foundation - Apple Mac OS X 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2770 2010-09-30 17:56 2010-09-7 Show GitHub Exploit DB Packet Storm
252778 7.2 危険 レッドハット - Red Hat Package Manager の lib/fsm.c における 権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2005-4889 2010-09-29 16:00 2010-06-8 Show GitHub Exploit DB Packet Storm
252779 10 危険 シスコシステムズ - Cisco Industrial Ethernet 3000 シリーズに SNMP Community String がハードコードされている問題 CWE-264
認可・権限・アクセス制御
CVE-2010-1574 2010-09-29 16:00 2010-07-13 Show GitHub Exploit DB Packet Storm
252780 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0778 2010-09-29 16:00 2010-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3671 9.9 CRITICAL
Network
- - A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via the documentation upload facility were served as-is on the … CWE-79
Cross-site Scripting
CVE-2026-40470 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3672 9.6 CRITICAL
Network
- - hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent credentials to uplo… CWE-352
 Origin Validation Error
CVE-2026-40471 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3673 9.9 CRITICAL
Network
- - In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scripting (XSS) attacks. CWE-79
Cross-site Scripting
CVE-2026-40472 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3674 - - - TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if device is left in de… CWE-1394
 Use of Default Cryptographic Key
CVE-2026-5039 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3675 8.0 HIGH
Network
dnnsoftware dotnetnuke DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could incl… CWE-87
 Improper Neutralization of Alternate XSS Syntax
CVE-2026-40321 2026-04-24 23:41 2026-04-18 Show GitHub Exploit DB Packet Storm
3676 3.7 LOW
Network
- - A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each hea… CWE-444
HTTP Request Smuggling
CVE-2026-2708 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3677 9.3 CRITICAL
Network
- - Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-32210 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3678 10.0 CRITICAL
Network
- - Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network. CWE-502
 Deserialization of Untrusted Data
CVE-2026-33819 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3679 8.1 HIGH
Network
- - OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and… CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-41353 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
3680 3.7 LOW
Network
- - OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to collide. Attackers ca… CWE-706
 Use of Incorrectly-Resolved Name or Reference
CVE-2026-41354 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm