Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
881 7.4 重要
Network 		Typebot Typebot Typebotにおける複数の脆弱性 CWE-200
CWE-284
CWE-311
CWE-522
CWE-522
CWE-639
CWE-79
CWE-79
CWE-862
CVE-2025-65098 2026-02-2 19:23 2026-01-22 Show GitHub Exploit DB Packet Storm
882 9.3 緊急
Network 		Vega project Vega Vega projectのVegaにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-65110 2026-02-2 19:23 2026-01-5 Show GitHub Exploit DB Packet Storm
883 6.8 警告
Physics 		D-Link Systems, Inc. DIR-605L ファームウェア D-Link CorporationのDIR-605L ファームウェアにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-65731 2026-02-2 19:23 2026-01-8 Show GitHub Exploit DB Packet Storm
884 7.8 重要
Local 		Vim Vim Vimにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-66476 2026-02-2 19:23 2025-12-2 Show GitHub Exploit DB Packet Storm
885 6.1 警告
Network 		Discourse Discourse Discourseにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2025-66488 2026-02-2 19:23 2026-01-28 Show GitHub Exploit DB Packet Storm
886 8.8 重要
Network 		Gargoyle Router Management Utility Gargoyle Gargoyle Router Management UtilityのGargoyleにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2015-10145 2026-02-2 19:22 2025-12-31 Show GitHub Exploit DB Packet Storm
887 5.3 警告
Network 		Xerox Xerox Workplace Suite XeroxのXerox Workplace Suiteにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2024-55929 2026-02-2 19:22 2025-01-23 Show GitHub Exploit DB Packet Storm
888 9.8 緊急
Network 		Xerox Xerox Workplace Suite XeroxのXerox Workplace Suiteにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2024-55930 2026-02-2 19:22 2025-01-23 Show GitHub Exploit DB Packet Storm
889 6.5 警告
Network 		Xerox Xerox Workplace Suite XeroxのXerox Workplace Suiteにおける重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2024-55931 2026-02-2 19:22 2025-01-27 Show GitHub Exploit DB Packet Storm
890 7.2 重要
Network 		Amazon.com, Inc. Harmonix Amazon.com, Inc.のHarmonixにおける不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定 		CVE-2025-14503 2026-02-2 19:22 2025-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211 7.8 HIGH
Local 		oracle application_development_framework Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E… New CWE-284
Improper Access Control 		CVE-2026-35243 2026-04-25 01:43 2026-04-22 Show GitHub Exploit DB Packet Storm
212 9.1 CRITICAL
Network 		oracle enterprise_manager_base_platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are 13.5 and 24.1. Easily explo… New CWE-306
Missing Authentication for Critical Function 		CVE-2026-34279 2026-04-25 01:43 2026-04-22 Show GitHub Exploit DB Packet Storm
213 6.0 MEDIUM
Local 		oracle graalvm
jdk
jre 		Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u481 and 8u481-b50; … New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-22003 2026-04-25 01:42 2026-04-22 Show GitHub Exploit DB Packet Storm
214 9.6 CRITICAL
Network 		google chrome Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.… New CWE-416
 Use After Free 		CVE-2026-6919 2026-04-25 01:39 2026-04-24 Show GitHub Exploit DB Packet Storm
215 9.6 CRITICAL
Network 		google chrome Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted … New CWE-125
Out-of-bounds Read 		CVE-2026-6920 2026-04-25 01:39 2026-04-24 Show GitHub Exploit DB Packet Storm
216 8.3 HIGH
Network 		google chrome Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium) New CWE-362
Race Condition 		CVE-2026-6921 2026-04-25 01:39 2026-04-24 Show GitHub Exploit DB Packet Storm
217 8.8 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the Chatflow configuration file upload settings can be modified to allow the application/javas… New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-41269 2026-04-25 01:39 2026-04-24 Show GitHub Exploit DB Packet Storm
218 8.3 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) protection bypass vulnerability exists in the Custom Func… New CWE-284
CWE-918
Improper Access Control
Server-Side Request Forgery (SSRF)  		CVE-2026-41270 2026-04-25 01:38 2026-04-24 Show GitHub Exploit DB Packet Storm
219 8.3 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) vulnerability exists in FlowiseAI's POST/GET API Chain co… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41271 2026-04-25 01:37 2026-04-24 Show GitHub Exploit DB Packet Storm
220 7.1 HIGH
Network 		flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the core security wrappers (secureAxiosRequest and secureFetch) intended to prevent Server-Sid… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41272 2026-04-25 01:37 2026-04-24 Show GitHub Exploit DB Packet Storm