Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
981	-	-	Rockwell Automation	ArmorStart LT 291D ControlLogix Redundancy Enhanced Module 1756-RM2XT ControlLogix Redundancy Enhanced Module 1756-RM2 ArmorStart LT&nb…	複数のRockwell Automation製品における複数の脆弱性	CWE-400 CWE-401	CVE-2025-14027 CVE-2025-9278 CVE-2025-9279 CVE-2025-9280 CVE-2025-9281 CVE-2025-9282 CVE-2025-9283 CVE-2025-9464 CVE-2025-9465 CVE-2025-9466	2026-02-2 10:39	2026-01-30	Show	GitHub Exploit DB Packet Storm

982	9.8	緊急 Network	Ryan Cobb	Covenant	Ryan CobbのCovenantにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2020-36911	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

983	7.5	重要 Network	CuteSoft Components Inc.	Rich Text Editor for PHP	CuteSoft Components Inc.のRich Text Editor for PHPにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47751	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

984	7.5	重要 Network	Skyjos Ltd.	Owlfiles	Skyjos Ltd.のOwlfilesにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2022-50890	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

985	6.1	警告 Network	Skyjos Ltd.	Owlfiles	Skyjos Ltd.のOwlfilesにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2022-50891	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

986	5.5	警告 Local	Ian Back	mPDF	mPDF ProjectのmPDFにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2022-50897	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

987	8.8	重要 Network	kalyan02	NanoCMS	kalyan02のNanoCMSにおける複数の脆弱性	CWE-434 CWE-94	CVE-2022-50898	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

988	9.8	緊急 Network	Beehive Forum	Beehive Forum	Project Beehive ForumのBeehive Forumにおけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2022-50910	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

989	5.3	警告 Network	サムスン	Smart suggestions android	サムスン等の複数ベンダの製品における不特定の脆弱性	CWE-noinfo 情報不足	CVE-2023-21479	2026-01-30 14:14	2025-09-3	Show	GitHub Exploit DB Packet Storm

990	9.1	緊急 Network	ブロケードコミュニケーションズシステムズ株式会社	Active Support Connectivity Gateway	ブロケードコミュニケーションズシステムズ株式会社のActive Support Connectivity Gatewayにおける認証情報の保護しない転送に関する脆弱性	CWE-523 認証情報の保護しない転送	CVE-2024-1509	2026-01-30 14:14	2025-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
41	4.8	MEDIUM Network	-	-	GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functionality that allows authenticated administrators to inject arbitrary J…	CWE-79 Cross-site Scripting	CVE-2026-23752	2026-04-21 03:16	2026-04-21	Show	GitHub Exploit DB Packet Storm

42	7.8	HIGH Local	microsoft	windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2019 windows_server_2022 windows_server_2022_…	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.	CWE-362 Race Condition	CVE-2026-32160	2026-04-21 03:15	2026-04-15	Show	GitHub Exploit DB Packet Storm

43	5.7	MEDIUM Network	dell	data_domain_operating_system	Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10 contain an insertion o…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-23775	2026-04-21 03:11	2026-04-17	Show	GitHub Exploit DB Packet Storm

44	7.8	HIGH Local	dell	data_domain_operating_system	Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50…	CWE-522 Insufficiently Protected Credentials	CVE-2025-36568	2026-04-21 03:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

45	7.2	HIGH Network	fortinet	fortiweb	An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attack…	CWE-787 Out-of-bounds Write	CVE-2026-40688	2026-04-21 03:07	2026-04-15	Show	GitHub Exploit DB Packet Storm

46	8.8	HIGH Network	fortinet	fortiddos-f	A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to execute unauthorized code or com…	CWE-89 SQL Injection	CVE-2026-39815	2026-04-21 03:06	2026-04-15	Show	GitHub Exploit DB Packet Storm

47	4.8	MEDIUM Network	fortinet	fortinac-f	An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F 7.2 all versions may a…	CWE-601 Open Redirect	CVE-2026-21741	2026-04-21 03:06	2026-04-15	Show	GitHub Exploit DB Packet Storm

48	7.2	HIGH Network	fortinet	fortianalyzer fortianalyzer_cloud fortimanager fortimanager_cloud	An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7…	CWE-89 SQL Injection	CVE-2025-61848	2026-04-21 03:05	2026-04-15	Show	GitHub Exploit DB Packet Storm

49	8.8	HIGH Adjacent	fortinet	fortios	A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS …	CWE-306 Missing Authentication for Critical Function	CVE-2025-53847	2026-04-21 03:04	2026-04-15	Show	GitHub Exploit DB Packet Storm

50	4.3	MEDIUM Network	fortinet	fortivoice fortindr	An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.…	CWE-200 Information Exposure	CVE-2024-23104	2026-04-21 03:03	2026-04-15	Show	GitHub Exploit DB Packet Storm