Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252951 5 警告 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット		 - Sun Java SE および OpenJDK の Java Runtime Environment (JRE) における ディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3728 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
252952 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0248 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
252953 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0244 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
252954 9.3 危険 マイクロソフト - Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0027 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
252955 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0247 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
252956 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
252957 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
252958 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
252959 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
252960 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3071 8.6 HIGH
Network 		- - Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-26150 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3072 3.7 LOW
Network 		- - A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each hea… CWE-444
HTTP Request Smuggling 		CVE-2026-2708 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3073 8.0 HIGH
Network 		- - Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. CWE-427
 Uncontrolled Search Path Element 		CVE-2026-32172 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3074 9.3 CRITICAL
Network 		- - Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-32210 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3075 9.3 CRITICAL
Network 		- - Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. CWE-601
Open Redirect 		CVE-2026-33102 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3076 10.0 CRITICAL
Network 		- - Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-33819 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
3077 8.1 HIGH
Network 		- - OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and… CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-41353 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
3078 3.7 LOW
Network 		- - OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows legitimate events from different conversations or senders to collide. Attackers ca… CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2026-41354 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
3079 7.3 HIGH
Local 		- - OpenShell before 2026.3.28 contains an arbitrary code execution vulnerability in mirror mode that converts untrusted sandbox files into workspace hooks. Attackers with mirror mode access can execute … CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-41355 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
3080 5.4 MEDIUM
Network 		- - OpenClaw before 2026.4.2 fails to filter Slack thread context by sender allowlist, allowing non-allowlisted messages to enter agent context. Attackers can inject unauthorized thread messages through … CWE-346
 Origin Validation Error 		CVE-2026-41358 2026-04-24 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm