Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
711	9.8	緊急 Network	yunjie.xiao	openvpn-cms-flask	yunjie.xiaoのopenvpn-cms-flaskにおける複数の脆弱性	CWE-74 CWE-77 CWE-77	CVE-2025-6775	2026-02-2 19:30	2025-06-27	Show	GitHub Exploit DB Packet Storm

712	9.8	緊急 Network	yunjie.xiao	openvpn-cms-flask	yunjie.xiaoのopenvpn-cms-flaskにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-6776	2026-02-2 19:30	2025-06-27	Show	GitHub Exploit DB Packet Storm

713	8.1	重要 Network	Qode Interactive	Optimize	Qode InteractiveのWordPress用OptimizeにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-67935	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

714	8.1	重要 Network	Qode Interactive	Curly	Qode InteractiveのWordPress用CurlyにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-67936	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

715	8.1	重要 Network	Qode Interactive	Hendon	Qode InteractiveのWordPress用HendonにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-67937	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

716	7.5	重要 Network	ThemeMove	EduMall	ThemeMoveのWordPress用EduMallにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-68061	2026-02-2 19:30	2025-12-16	Show	GitHub Exploit DB Packet Storm

717	7.5	重要 Network	ThemeMove	Minimogwp	ThemeMoveのWordPress用MinimogwpにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-68062	2026-02-2 19:30	2025-12-16	Show	GitHub Exploit DB Packet Storm

718	6.5	警告 Network	Shopify	React Router	ShopifyのReact Routerにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2025-68470	2026-02-2 19:30	2026-01-10	Show	GitHub Exploit DB Packet Storm

719	7.5	重要 Network	wpwebelite	Follow My Blog Post	WPWeb EliteのWordPress用Follow My Blog Postにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-68547	2026-02-2 19:30	2026-01-5	Show	GitHub Exploit DB Packet Storm

720	9.1	緊急 Network	Panda Wireless	PWRU01 Firmware	Panda WirelessのPWRU01 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-68715	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
81	-		-	-	Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privileged role via /platform/user/{username}. The `role` field is a… New	-	CVE-2026-30269	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

82	-		-	-	libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on assert() for bounds checking, which i… Update	CWE-125 Out-of-bounds Read	CVE-2026-29013	2026-04-21 02:16	2026-04-18	Show	GitHub Exploit DB Packet Storm

83	6.7	MEDIUM Local	-	-	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflo… New	CWE-121 Stack-based Buffer Overflow	CVE-2026-26951	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

84	7.2	HIGH Network	-	-	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vuln… New	CWE-78 OS Command	CVE-2026-26943	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

85	6.7	MEDIUM Local	-	-	Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability. A high privileged attacke… New	CWE-78 OS Command	CVE-2026-26942	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

86	4.9	MEDIUM Network	-	-	Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Pr… New	CWE-22 CWE-184 Path Traversal Incomplete Blacklist	CVE-2026-25525	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

87	8.1	HIGH Network	-	-	Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Pr… New	CWE-502 Deserialization of Untrusted Data	CVE-2026-25524	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

88	7.5	HIGH Network	-	-	Vexa is an open-source, self-hostable meeting bot API and meeting transcription API. Prior to 0.10.0-260419-1910, the Vexa transcription-collector service exposes an internal endpoint `GET /internal/… New	CWE-306 CWE-862 Missing Authentication for Critical Function Missing Authorization	CVE-2026-25058	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

89	7.2	HIGH Network	-	-	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vuln… New	CWE-78 OS Command	CVE-2026-24506	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

90	7.2	HIGH Network	-	-	Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability,… New	CWE-20 Improper Input Validation	CVE-2026-24505	2026-04-21 02:16	2026-04-21	Show	GitHub Exploit DB Packet Storm