Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
571 6.5 警告
Network
gitea project gitea gitea projectのgiteaにおける複数の脆弱性 CWE-284
CWE-639
CVE-2026-20904 2026-02-2 19:36 2026-01-22 Show GitHub Exploit DB Packet Storm
572 9.1 緊急
Network
gitea project gitea gitea projectのgiteaにおける複数の脆弱性 CWE-284
CWE-639
CVE-2026-20912 2026-02-2 19:36 2026-01-22 Show GitHub Exploit DB Packet Storm
573 5.4 警告
Network
Stack Ideas Private Limited. EasyDiscuss Stack Ideas Private Limited.のEasyDiscussにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-21623 2026-02-2 19:36 2026-01-16 Show GitHub Exploit DB Packet Storm
574 8.8 重要
Adjacent
UI UniFi Protect UIのUniFi Protectにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-21633 2026-02-2 19:36 2026-01-5 Show GitHub Exploit DB Packet Storm
575 6.5 警告
Adjacent
UI UniFi Protect UIのUniFi Protectにおけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-21634 2026-02-2 19:36 2026-01-5 Show GitHub Exploit DB Packet Storm
576 2.7
Network
Aquq Platform Revive Adserver Aquq PlatformのRevive Adserverにおける書式文字列に関する脆弱性 CWE-134
書式文字列の問題
CVE-2026-21640 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
577 6.5 警告
Network
Aquq Platform Revive Adserver Aquq PlatformのRevive Adserverにおける認可に関する脆弱性 CWE-285
不適切な認可
CVE-2026-21641 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
578 6.1 警告
Network
Aquq Platform Revive Adserver Aquq PlatformのRevive Adserverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-21642 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
579 6.5 警告
Network
Discourse Discourse Discourseにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-21865 2026-02-2 19:36 2026-01-28 Show GitHub Exploit DB Packet Storm
580 5.4 警告
Network
オラクル Oracle Utilities Framework オラクルのOracle Utilities Frameworkにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-21924 2026-02-2 19:36 2026-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 7.0 HIGH
Network
openremote openremote OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.1, a user who has `write:admin` in one Keycloak realm can call the Manager API to update Keycloak realm roles for users… New CWE-284
Improper Access Control
CVE-2026-41166 2026-04-24 22:10 2026-04-23 Show GitHub Exploit DB Packet Storm
502 5.3 MEDIUM
Network
pypdf_project pypdf pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-ref… New CWE-834
 Excessive Iteration
CVE-2026-41168 2026-04-24 22:07 2026-04-23 Show GitHub Exploit DB Packet Storm
503 6.2 MEDIUM
Local
- - A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2. Notifications marked for deletion could be unexpectedly … New CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor
CVE-2026-28950 2026-04-24 06:16 2026-04-23 Show GitHub Exploit DB Packet Storm
504 6.5 MEDIUM
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause de… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-0186 2026-04-24 05:51 2026-04-23 Show GitHub Exploit DB Packet Storm
505 6.5 MEDIUM
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause de… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-3922 2026-04-24 05:50 2026-04-23 Show GitHub Exploit DB Packet Storm
506 6.5 MEDIUM
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause den… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-6016 2026-04-24 05:49 2026-04-23 Show GitHub Exploit DB Packet Storm
507 2.7 LOW
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an authe… New CWE-863
 Incorrect Authorization
CVE-2025-9957 2026-04-24 05:46 2026-04-23 Show GitHub Exploit DB Packet Storm
508 6.5 MEDIUM
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an authe… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-1660 2026-04-24 05:45 2026-04-23 Show GitHub Exploit DB Packet Storm
509 3.5 LOW
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to load unauthorized content int… New CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2026-3254 2026-04-24 05:43 2026-04-23 Show GitHub Exploit DB Packet Storm
510 8.1 HIGH
Network
gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an unauthenticated user to execut… New CWE-352
 Origin Validation Error
CVE-2026-4922 2026-04-24 05:40 2026-04-23 Show GitHub Exploit DB Packet Storm