Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
891	7.8	重要 Local		-	1E Ltdの1E Platformにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2025-1683	2026-02-2 19:22	2025-03-12	Show	GitHub Exploit DB Packet Storm

892	7.5	重要 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおける重要情報を含む Web ブラウザキャッシュの使用に関する脆弱性	CWE-525 重要情報を含む Web ブラウザキャッシュの使用	CVE-2025-52659	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

893	5.3	警告 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-52661	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

894	5.3	警告 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2025-55249	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

895	9.8	緊急 Network	ipTIME	A8004ITL Firmware A104NS Firmware N704E plus Firmware A604-V5 Firmware N602E Firmware N3-I Firmware A604 Firmware N104V Firmware A…	ipTIMEのA1004 Firmware等の複数製品におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-55423	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

896	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-59464	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

897	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-59465	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

898	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるキャッチされない例外に関する脆弱性	CWE-248 キャッチされない例外	CVE-2025-59466	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

899	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63082	2026-02-2 19:22	2026-01-6	Show	GitHub Exploit DB Packet Storm

900	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63083	2026-02-2 19:22	2026-01-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
31	8.8	HIGH Network	dell	powerprotect_dp_series_appliance data_domain_operating_system	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.1…	CWE-295 Improper Certificate Validation	CVE-2026-23776	2026-04-21 03:17	2026-04-17	Show	GitHub Exploit DB Packet Storm

32	7.2	HIGH Network	dell	powerprotect_dp_series_appliance data_domain_operating_system	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.1…	CWE-77 Command Injection	CVE-2026-23778	2026-04-21 03:17	2026-04-17	Show	GitHub Exploit DB Packet Storm

33	5.8	MEDIUM Network	-	-	OpenClaw versions 2026.4.7 before 2026.4.15 fail to enforce local-root containment on tool-result media paths, allowing arbitrary local and UNC file access. Attackers can craft malicious tool-result …	CWE-73 External Control of File Name or Path	CVE-2026-41389	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

34	7.8	HIGH Local	-	-	Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.7 and before allows a local attacker to execute arbitrary code via a crafted file	CWE-277 Insecure Inherited Permissions	CVE-2026-30266	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

35	6.6	MEDIUM Local	-	-	python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbolic links when rewri…	CWE-59 CWE-61 Link Following UNIX Symbolic Link (Symlink) Following	CVE-2026-28684	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

36	-		-	-	A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and passes its address to…	-	CVE-2026-26399	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

37	-		-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that allows authenticated staff members to inject malicious JavaScript by manipulating the …	CWE-79 Cross-site Scripting	CVE-2026-23758	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

38	5.4	MEDIUM Network	-	-	GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFT_Report::Create() without HTML sanitization…	CWE-79 Cross-site Scripting	CVE-2026-23757	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

39	5.4	MEDIUM Network	-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Controller_Step.InsertSubmit() and Ed…	CWE-79 Cross-site Scripting	CVE-2026-23756	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

40	4.8	MEDIUM Network	-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where the charset POST parameter is passed directly to SWIFT_Language::Create(…	CWE-79 Cross-site Scripting	CVE-2026-23753	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm