Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
751 7.5 重要
Network
Sick Incoming Goods Suite SickのIncoming Goods SuiteにおけるGET リクエストにおけるクエリ文字列からの情報漏えいに関する脆弱性 CWE-598
GET リクエストにおけるクエリ文字列からの情報漏えい
CVE-2026-22644 2026-02-2 19:28 2026-01-15 Show GitHub Exploit DB Packet Storm
752 5.3 警告
Network
Sick Incoming Goods Suite SickのIncoming Goods Suiteにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-22645 2026-02-2 19:28 2026-01-15 Show GitHub Exploit DB Packet Storm
753 7.5 重要
Network
Sick Incoming Goods Suite SickのIncoming Goods Suiteにおけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい
CVE-2026-22646 2026-02-2 19:28 2026-01-15 Show GitHub Exploit DB Packet Storm
754 9.8 緊急
Network
Eigent Eigent Eigentにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-22869 2026-02-2 19:28 2026-01-13 Show GitHub Exploit DB Packet Storm
755 5.4 警告
Network
pimcore Web2print Tools pimcoreのWeb2print Toolsにおける複数の脆弱性 CWE-284
CWE-863
CVE-2026-23496 2026-02-2 19:28 2026-01-15 Show GitHub Exploit DB Packet Storm
756 5.4 警告
Network
LimeSurvey LimeSurvey LimeSurveyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2020-36993 2026-02-2 19:28 2026-01-28 Show GitHub Exploit DB Packet Storm
757 7.8 重要
Local
10-Strike Software network inventory explorer 10-Strike Softwareのnetwork inventory explorerにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2021-47767 2026-02-2 19:28 2026-01-15 Show GitHub Exploit DB Packet Storm
758 8.8 重要
Network
WebsiteBaker Org WebsiteBaker WebsiteBaker OrgのWebsiteBakerにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2021-47788 2026-02-2 19:28 2026-01-16 Show GitHub Exploit DB Packet Storm
759 7.5 重要
Network
SmartSoft SmartFTP SmartSoftのSmartFTPにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2021-47791 2026-02-2 19:28 2026-01-16 Show GitHub Exploit DB Packet Storm
760 7.5 重要
Network
Telegram Telegram Desktop TelegramのTelegram Desktopにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2021-47793 2026-02-2 19:28 2026-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 9.8 CRITICAL
Network
- - SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device. CWE-122
Heap-based Buffer Overflow
CVE-2026-32956 2026-04-20 13:16 2026-04-20 Show GitHub Exploit DB Packet Storm
232 8.8 HIGH
Network
- - SD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device. CWE-121
Stack-based Buffer Overflow
CVE-2026-32955 2026-04-20 13:16 2026-04-20 Show GitHub Exploit DB Packet Storm
233 2.7 LOW
Network
- - A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function remove_api_keys/has_api_terms of the file src/backend/base/langflow/api/utils/core.py of the component Flo… CWE-255
CWE-256
Credentials Management
Plaintext Storage of a Password 
CVE-2026-6597 2026-04-20 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
234 7.3 HIGH
Network
- - A security flaw has been discovered in langflow-ai langflow up to 1.1.0. This issue affects the function create_upload_file of the file src/backend/base/Langflow/api/v1/endpoints.py of the component … CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-6596 2026-04-20 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
235 7.3 HIGH
Network
- - A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This vulnerability affects unknown code of the file buslocation.php of t… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-6595 2026-04-20 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
236 7.3 HIGH
Network
- - A vulnerability was determined in brikcss merge up to 1.3.0. This affects an unknown part. Executing a manipulation of the argument __proto__/constructor.prototype/prototype can lead to improperly co… CWE-94
CWE-1321
Code Injection
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-6594 2026-04-20 11:16 2026-04-20 Show GitHub Exploit DB Packet Storm
237 3.5 LOW
Network
- - A vulnerability was found in ComfyUI up to 0.13.0. Affected by this issue is some unknown functionality of the file server.py of the component View Endpoint. Performing a manipulation results in cros… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-6593 2026-04-20 11:16 2026-04-20 Show GitHub Exploit DB Packet Storm
238 3.5 LOW
Network
- - A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user_manager.py of the component userdata Endpoint. Such manipulatio… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-6592 2026-04-20 11:16 2026-04-20 Show GitHub Exploit DB Packet Storm
239 4.3 MEDIUM
Network
- - A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folder_paths.get_annotated_filepath of the file folder_paths.py of the component LoadImage Node. This manipulation of the argum… CWE-22
Path Traversal
CVE-2026-6591 2026-04-20 10:16 2026-04-20 Show GitHub Exploit DB Packet Storm
240 4.3 MEDIUM
Network
- - A vulnerability was detected in ComfyUI up to 0.13.0. This impacts the function get_model_preview of the file app/model_manager.py of the component Model Preview Endpoint. The manipulation results in… CWE-22
Path Traversal
CVE-2026-6590 2026-04-20 10:16 2026-04-20 Show GitHub Exploit DB Packet Storm