Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226721 8.5 危険 レッドハット - Cygwin の cygwin1.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6181 2012-12-20 18:34 2007-11-8 Show GitHub Exploit DB Packet Storm
226722 8.5 危険 phpdevshell - PHPDevShell における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6174 2012-12-20 18:34 2007-11-29 Show GitHub Exploit DB Packet Storm
226723 10 危険 wire plastic design - wpQuiz における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6172 2012-12-20 18:34 2007-11-29 Show GitHub Exploit DB Packet Storm
226724 7.5 危険 vu - VU Case Manager の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6168 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
226725 7.2 危険 SUSE - SUSE Linux の yast2-core における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6167 2012-12-20 18:34 2007-11-22 Show GitHub Exploit DB Packet Storm
226726 4.3 警告 wsdeluxe - FMDeluxe の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6162 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
226727 5 警告 tilde.dk - Tilde CMS の index.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2007-6161 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
226728 4.3 警告 tilde.dk - Tilde CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6160 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
226729 7.5 危険 tilde.dk - Tilde CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6159 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
226730 7.5 危険 proverbs - Proverbs Web Calendar の caladmin.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6158 2012-12-20 18:34 2007-11-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 8.5 HIGH
Network
linuxfoundation tekton_pipelines Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. From 1.0.0 to before 1.11.0, the git resolver's revision parameter is passed directly as a positional argume… Update CWE-88
Argument Injection
CVE-2026-40938 2026-04-29 00:06 2026-04-22 Show GitHub Exploit DB Packet Storm
132 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated with devm_request_irq(). So devr… Update CWE-415
 Double Free
CVE-2026-31506 2026-04-29 00:05 2026-04-22 Show GitHub Exploit DB Packet Storm
133 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer smc_rx_splice() allocates one smc_spd_priv per … Update CWE-415
 Double Free
CVE-2026-31507 2026-04-29 00:05 2026-04-22 Show GitHub Exploit DB Packet Storm
134 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the Fixes tag below changed the teardown co… Update NVD-CWE-noinfo
CVE-2026-31508 2026-04-29 00:04 2026-04-22 Show GitHub Exploit DB Packet Storm
135 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes rx_wq and tx_wq while holding req_lock. … Update CWE-667
 Improper Locking
CVE-2026-31509 2026-04-29 00:02 2026-04-22 Show GitHub Exploit DB Packet Storm
136 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Before using sk pointer, check if it is null. Fix the following: K… Update CWE-476
 NULL Pointer Dereference
CVE-2026-31510 2026-04-29 00:01 2026-04-22 Show GitHub Exploit DB Packet Storm
137 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixes the condition checking so mgmt_pending… Update CWE-416
 Use After Free
CVE-2026-31511 2026-04-28 23:59 2026-04-22 Show GitHub Exploit DB Packet Storm
138 9.9 CRITICAL
Network
saltcorn saltcorn Saltcorn is an extensible, open source, no-code database application builder. Prior to 1.4.6, 1.5.6, and 1.6.0-beta.5, a SQL injection vulnerability in Saltcorn’s mobile-sync routes allows any authen… Update CWE-89
SQL Injection
CVE-2026-41478 2026-04-28 23:58 2026-04-25 Show GitHub Exploit DB Packet Storm
139 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 950803f72547 ("bonding: fix type confusion in bond_… Update CWE-843
Type Confusion
CVE-2026-31502 2026-04-28 23:47 2026-04-22 Show GitHub Exploit DB Packet Storm
140 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after free On admin queue completion handling, if the admin command completed with error we p… Update CWE-416
 Use After Free
CVE-2026-31493 2026-04-28 23:45 2026-04-22 Show GitHub Exploit DB Packet Storm