Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227411 7.8 危険 portalapp - PortalApp におけるデータベースをダウンロードされる脆弱性 - CVE-2007-3252 2012-12-20 18:19 2007-06-18 Show GitHub Exploit DB Packet Storm
227412 6.8 警告 VirtueMart - VirtueMart における SQL インジェクションの脆弱性 - CVE-2007-3247 2012-12-20 18:19 2007-06-18 Show GitHub Exploit DB Packet Storm
227413 7.5 危険 web-app.org
web-app.net		 - web-app.net WebAPP などの Menu Manager Mod における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3242 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
227414 4.3 警告 WordPress.org - WordPress 用の cordobo-green-park テーマの blogroll.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3241 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
227415 4.3 警告 WordPress.org - WordPress 用の Vistered-Little テーマの 404.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3240 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
227416 4.3 警告 WordPress.org - WordPress 用の AndyBlue テーマの searchform.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3239 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
227417 6 警告 WordPress.org - WordPress のデフォルトテーマの functions.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3238 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
227418 6.8 警告 XOOPS - XOOPS 用の TinyContent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3237 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
227419 7.5 危険 XOOPS - XOOPS 用の Horoscope モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3236 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
227420 5 警告 tec-it - TEC-IT TBarCode OCX ActiveX コントロール における任意のファイルを上書きされる脆弱性 - CVE-2007-3233 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1011 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: rxrpc: proc: size address buffers for %pISpc output The AF_RXRPC procfs helpers format local and remote socket addresses into fix… Update - CVE-2026-31630 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1012 8.8 HIGH
Adjacent 		- - In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: add missing return after LLCP_CLOSED checks In nfc_llcp_recv_hdlc() and nfc_llcp_recv_disc(), when the socket state is… Update - CVE-2026-31629 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1013 8.8 HIGH
Network 		roxy-wi roxy-wi Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the /config/ < service > /find-in-config endpoint in Roxy-WI fails to sanitize the use… Update CWE-78
OS Command  		CVE-2026-33208 2026-04-28 00:16 2026-04-24 Show GitHub Exploit DB Packet Storm
1014 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: i2c: s3c24xx: check the size of the SMBUS message before using it The first byte of an i2c SMBUS message is the size, and it shou… Update - CVE-2026-31627 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1015 7.1 HIGH
Adjacent 		- - In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Initialize le_tmp64 to zero in rtw_BIP_verify() to prevent using unin… Update - CVE-2026-31626 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1016 9.8 CRITICAL
Network 		- - In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already… Update - CVE-2026-31608 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1017 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Limit PTP to a single page Commit 391e69143d0a increased CT_PTP_NUM from 1 to 4 to support 256 playback streams, but… Update - CVE-2026-31602 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1018 7.5 HIGH
Network 		- - In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Handle invalid large leaf mappings correctly It has been possible for a long time to mark ptes in the linear map as in… Update - CVE-2026-31600 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1019 7.5 HIGH
Network 		- - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible deadlock between unlink and dio_end_io_write ocfs2_unlink takes orphan dir inode_lock first and then ip_alloc… Update - CVE-2026-31598 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1020 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix use-after-free in encoder release path The fops_vcodec_release() function frees the context structur… Update - CVE-2026-31584 2026-04-28 00:16 2026-04-25 Show GitHub Exploit DB Packet Storm