Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2881 - - (複数のベンダ) (複数の製品) CISA ICS Advisory / ICS Medical Advisory(2026年04月21日) - - 2026-04-23 17:41 2026-04-22 Show GitHub Exploit DB Packet Storm
2882 8.8 重要
Network
サイレックス・テクノロジー株式会社 SD-330AC
AMC Manager
サイレックス・テクノロジー製SD-330ACおよびAMC Managerにおける複数の脆弱性 CWE-1188
CWE-121
CWE-122
CWE-1395
CWE-226
CWE-266
CWE-306
CWE-321
CWE-327
CWE-79
CWE-93
CVE-2015-5621
CVE-2024-24487
CVE-2026-32955
CVE-2026-32956
CVE-2026-32957
CVE-2026-32958
CVE-2026-32959
CVE-2026-32960
CVE-2026-32961
CVE-2026-32962
CVE-2026-32963
CV…
2026-04-23 17:36 2026-04-20 Show GitHub Exploit DB Packet Storm
2883 7.5 重要
Network
株式会社GROWI GROWI GROWIにおける、正規表現を用いたサービス運用妨害(ReDoS)の脆弱性 CWE-Other
その他
CVE-2026-41040 2026-04-23 15:16 2026-04-23 Show GitHub Exploit DB Packet Storm
2884 8.8 重要
Network
一般社団法人 JPCERT コーディネーションセンター LogonTracer LogonTracerにおける複数の脆弱性 CWE-78
CWE-Other
CVE-2026-33277
CVE-2026-33566
2026-04-23 14:12 2026-04-23 Show GitHub Exploit DB Packet Storm
2885 7.3 重要
Local
i-PRO株式会社 IP簡単設定ソフトウェア i-PRO製IP簡単設定ソフトウェアにおけるDLL読み込みに関する脆弱性 CWE-Other
その他
CVE-2026-34488 2026-04-23 12:21 2026-04-23 Show GitHub Exploit DB Packet Storm
2886 4.7 警告
Network
彼方株式会社 CMS ALAYA CMS ALAYAにおけるSQLインジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-40529 2026-04-23 12:07 2026-04-23 Show GitHub Exploit DB Packet Storm
2887 10 緊急
Network
Quest Software Inc. KACE Systems Management Appliance Quest Software Inc.のKACE Systems Management Applianceにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2025-32975 2026-04-23 10:17 2025-06-24 Show GitHub Exploit DB Packet Storm
2888 7.5 重要
Network
jsonparser project jsonparser jsonparser projectのjsonparserにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2026-32285 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
2889 7.5 重要
Network
antchfx Xpath antchfxのXpathにおける無限ループに関する脆弱性 CWE-835
無限ループ
CVE-2026-32287 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
2890 5.5 警告
Local
Direct-Soft Inc. WinMPG Video Convert Direct-Soft Inc.のWinMPG Video Convertにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2019-25644 2026-04-23 10:17 2026-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347341 - typo3 ws_ecard Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors. CWE-22
Path Traversal
CVE-2009-4740 2010-03-30 01:42 2010-03-27 Show GitHub Exploit DB Packet Storm
347342 - ibm aix bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial … NVD-CWE-Other
CVE-2010-1124 2010-03-29 13:00 2010-03-27 Show GitHub Exploit DB Packet Storm
347343 - jbmc-software directadmin JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this tem… CWE-59
Link Following
CVE-2009-1526 2010-03-29 13:00 2009-05-6 Show GitHub Exploit DB Packet Storm
347344 - skype skype Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2009-4741 2010-03-29 13:00 2010-03-27 Show GitHub Exploit DB Packet Storm
347345 - arwscripts fonts_script Directory traversal vulnerability in viewfile.php in ARWScripts Fonts Script allows remote attackers to read arbitrary local files via directory traversal sequences in a base64-encoded f parameter. … CWE-22
Path Traversal
CVE-2010-0613 2010-03-26 14:37 2010-02-12 Show GitHub Exploit DB Packet Storm
347346 - tristan_barczyk klonews Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. CWE-79
Cross-site Scripting
CVE-2010-1112 2010-03-26 13:00 2010-03-26 Show GitHub Exploit DB Packet Storm
347347 - phptroubleticket php_trouble_ticket SQL injection vulnerability in vedi_faq.php in PHP Trouble Ticket 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2010-1089 2010-03-25 13:00 2010-03-25 Show GitHub Exploit DB Packet Storm
347348 - scriptsfeed dating_software Multiple SQL injection vulnerabilities in searchmatch.php in ScriptsFeed Dating Software allow remote attackers to execute arbitrary SQL commands via the (1) txtgender and (2) txtlookgender parameter… CWE-89
SQL Injection
CVE-2010-1096 2010-03-25 13:00 2010-03-25 Show GitHub Exploit DB Packet Storm
347349 - springsource application_management_suite
hyperic_hq
tc_server
Multiple cross-site scripting (XSS) vulnerabilities in SpringSource tc Server 6.0.20.B and earlier, Application Management Suite (AMS) before 2.0.0.SR4, Hyperic HQ Open Source before 4.2.x, Hyperic H… CWE-79
Cross-site Scripting
CVE-2009-2907 2010-03-25 13:00 2010-03-25 Show GitHub Exploit DB Packet Storm
347350 - springsource application_management_suite
hyperic_hq
tc_server
Per: http://www.springsource.com/security/cve-2009-2907 'Mitigation: * Hyperic HQ Open Source users should upgrade to Hyperic HQ 4.2.x * Hyperic HQ 4.0 Enterprise users should upgra… CWE-79
Cross-site Scripting
CVE-2009-2907 2010-03-25 13:00 2010-03-25 Show GitHub Exploit DB Packet Storm