Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227011 6.8 警告 robocode - Robocode の Event Dispatch Thread における任意の Java コードを実行される脆弱性 CWE-DesignError
CVE-2007-6382 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
227012 6.5 警告 TYPO3 Association - TYPO3 用の indexed_search システムエクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6381 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
227013 5 警告 WordPress.org - WordPress 用の PictPress プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6369 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
227014 4.3 警告 sinecms - SineCMS の guestbook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6367 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
227015 7.5 危険 sinecms - SineCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6366 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
227016 7.8 危険 サン・マイクロシステムズ - Sun XSCF XCP におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-6360 2012-12-20 18:34 2007-12-4 Show GitHub Exploit DB Packet Storm
227017 8.5 危険 scponly - scponly におけるコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6350 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
227018 6.8 警告 SquirrelMail Project - SquirrelMail における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6348 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
227019 6.8 警告 prowizard - prowiz におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6510 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
227020 7.5 危険 xecms - xeCMS の view.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6508 2012-12-20 18:34 2007-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
641 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not skip unrelated mode changes in DSC validation Starting with commit 17ce8a6907f7 ("drm/amd/display: Add ds… Update CWE-416
 Use After Free 		CVE-2026-31488 2026-04-28 21:58 2026-04-22 Show GitHub Exploit DB Packet Storm
642 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the controller with devm_spi_register_controller(),… Update CWE-415
 Double Free 		CVE-2026-31489 2026-04-28 21:57 2026-04-22 Show GitHub Exploit DB Packet Storm
643 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix use-after-free in migration restore When an error is returned from xe_sriov_pf_migration_restore_produce(), the da… Update CWE-416
 Use After Free 		CVE-2026-31490 2026-04-28 21:52 2026-04-22 Show GitHub Exploit DB Packet Storm
644 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size. This can cau… Update CWE-190
 Integer Overflow or Wraparound 		CVE-2026-31491 2026-04-28 21:51 2026-04-22 Show GitHub Exploit DB Packet Storm
645 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before using it In irdma_create_qp, if ib_copy_to_udata fails, it will call irdma_destr… Update CWE-908
 Use of Uninitialized Resource 		CVE-2026-31492 2026-04-28 21:46 2026-04-22 Show GitHub Exploit DB Packet Storm
646 9.6 CRITICAL
Network 		microsoft partner_center Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. Update CWE-284
Improper Access Control 		CVE-2026-24303 2026-04-28 21:11 2026-04-24 Show GitHub Exploit DB Packet Storm
647 10.0 CRITICAL
Network 		microsoft entra_id Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network. Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-35431 2026-04-28 21:10 2026-04-24 Show GitHub Exploit DB Packet Storm
648 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread creation fails Boot-time trigger registration can fail before the trigger-data c… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-31481 2026-04-28 20:38 2026-04-22 Show GitHub Exploit DB Packet Storm
649 7.5 HIGH
Network 		- - An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes. New CWE-306
Missing Authentication for Critical Function 		CVE-2026-3323 2026-04-28 20:16 2026-04-28 Show GitHub Exploit DB Packet Storm
650 6.7 MEDIUM
Local 		- - AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific directory, resulting in arbitra… New CWE-428
 Unquoted Search Path or Element 		CVE-2026-7280 2026-04-28 19:16 2026-04-28 Show GitHub Exploit DB Packet Storm