Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1341	5.4	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-4867	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

1342	7.5	重要 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API ManagerにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-8010	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

1343	5.4	警告 Network	WSO2	WSO2 Identity Server	WSO2のWSO2 Identity Serverにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-12624	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

1344	8.2	重要 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2025-31958	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

1345	5.3	警告 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2025-31981	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

1346	6.1	警告 Network	WSO2	WSO2 API Manager WSO2 Identity Server	WSO2のWSO2 API Manager等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-6024	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

1347	6.5	警告 Network	フォーティネット	FortiOS FortiPAM FortiProxy FortiSwitch Manager	フォーティネットのFortiOS等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-61624	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

1348	5.4	警告 Network	フォーティネット	FortiSandbox FortiSandbox Cloud	フォーティネットのFortiSandbox等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-61886	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

1349	5.3	警告 Network	Apache Software Foundation	Apache Doris-MCP-Server	Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-66335	2026-04-24 11:34	2026-04-20	Show	GitHub Exploit DB Packet Storm

1350	6.5	警告 Network	フォーティネット	FortiManager Cloud FortiAnalyzer FortiAnalyzer Cloud FortiManager	フォーティネットのFortiAnalyzer等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-68649	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
61	-		-	-	Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or Jav… New	CWE-79 Cross-site Scripting	CVE-2026-40230	2026-04-30 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

62	-		-	-	Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered une… New	CWE-79 Cross-site Scripting	CVE-2026-40229	2026-04-30 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

63	-		-	-	If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different tha… New	CWE-22 Path Traversal	CVE-2026-3087	2026-04-30 01:16	2026-04-28	Show	GitHub Exploit DB Packet Storm

64	-		-	-	Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component. This vulnerability allows authenticated attackers to write files to arbitrary locations within the uploads d… New	-	CVE-2026-38993	2026-04-30 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

65	-		-	-	Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially crafted filename bypasses an extension filter. This allows an au… New	-	CVE-2026-38991	2026-04-30 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

66	-		-	-	Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint. The application fails to properly sanitize user i… New	-	CVE-2026-38949	2026-04-30 01:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

67	6.1	MEDIUM Network	-	-	A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the uns… New	CWE-79 Cross-site Scripting	CVE-2026-37750	2026-04-30 01:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

68	-		-	-	An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When … New	-	CVE-2026-37555	2026-04-30 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

69	7.5	HIGH Network	-	-	TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function. New	CWE-121 Stack-based Buffer Overflow	CVE-2026-36837	2026-04-30 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

70	-		-	-	An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests. New	-	CVE-2026-30769	2026-04-30 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm