Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1231	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-6748	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1232	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-6749	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1233	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6750	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1234	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-6751	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1235	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6752	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1236	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6753	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1237	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6754	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1238	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-6755	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1239	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox	Mozilla FoundationのMozilla Firefoxにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-6756	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1240	6.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないポインタのアクセスに関する脆弱性	CWE-824 初期化されていないポインタのアクセス	CVE-2026-6757	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
151	9.6	CRITICAL Network	github	enterprise_server	An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access private repositories outside the int… Update	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-5845	2026-04-29 21:30	2026-04-22	Show	GitHub Exploit DB Packet Storm

152	7.1	HIGH Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue affects User Regist… New	CWE-79 Cross-site Scripting	CVE-2026-42652	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

153	4.3	MEDIUM Network	-	-	Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from … New	CWE-862 Missing Authorization	CVE-2026-42648	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

154	7.6	HIGH Network	-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress simple-tags allows Blind SQL Injection.This issue affects TaxoPress: from n… New	CWE-89 SQL Injection	CVE-2026-42646	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

155	4.3	MEDIUM Network	-	-	Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders al… New	CWE-352 Origin Validation Error	CVE-2026-42645	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

156	5.3	MEDIUM Network	-	-	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: fr… New	CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere	CVE-2026-42644	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

157	5.9	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widget image-widget allows Stored XSS.This issue affects Image Widget: from n/a t… New	CWE-79 Cross-site Scripting	CVE-2026-42643	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

158	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through <= 4.14.5. New	CWE-862 Missing Authorization	CVE-2026-42642	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

159	5.4	MEDIUM Network	-	-	Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request Forgery.This issue affects Share This Image: from n/a through <= 2.14. New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42641	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

160	-		-	-	Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers. When downloading updates, the applicat… New	CWE-22 CWE-494 Path Traversal Download of Code Without Integrity Check	CVE-2026-42249	2026-04-29 21:16	2026-04-29	Show	GitHub Exploit DB Packet Storm