Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227601	7.5	危険	phpsyncml	-	phpSyncML における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4978	2012-12-20 18:33	2007-09-19	Show	GitHub Exploit DB Packet Storm

227602	1.9	注意	sysinternals	-	RegMon におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-4972	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227603	4.4	警告	sysinternals	-	Process Monitor におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-4969	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227604	4.4	警告	PWI, Inc.	-	Privatefirewall におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-4968	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227605	5	警告	Gilles Vollant	-	WinImage におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-4964	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227606	9.3	危険	Gilles Vollant	-	WinImage におけるコピー先のファイル名を偽造される脆弱性	CWE-Other その他	CVE-2007-4963	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227607	9.3	危険	Gilles Vollant	-	WinImage におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-4962	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227608	4.3	警告	TinyWebGallery	-	TWG におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4958	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227609	7.5	危険	simpcms	-	SimpCMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-4953	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

227610	5.1	警告	webmedia explorer	-	webmex における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4948	2012-12-20 18:33	2007-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1211	3.7	LOW Network	linuxfoundation	backstage\/backend_defaults	Backstage es un framework abierto para construir portales de desarrolladores, y @backstage/backend-defaults proporciona las implementaciones y configuración predeterminadas para una aplicación backen…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-24048	2026-04-26 03:01	2026-01-22	Show	GitHub Exploit DB Packet Storm

1212	2.7	LOW Network	linuxfoundation	backstage\/integration	Backstage is an open framework for building developer portals. Prior to version 1.20.1, a vulnerability in the SCM URL parsing used by Backstage integrations allowed path traversal sequences in encod…	CWE-22 Path Traversal	CVE-2026-29185	2026-04-26 03:01	2026-03-8	Show	GitHub Exploit DB Packet Storm

1213	2.7	LOW Network	linuxfoundation	backstage\/integration	Backstage es un framework abierto para construir portales de desarrolladores. Antes de la versión 1.20.1, una vulnerabilidad en el análisis de URL de SCM utilizado por las integraciones de Backstage …	CWE-22 Path Traversal	CVE-2026-29185	2026-04-26 03:01	2026-03-8	Show	GitHub Exploit DB Packet Storm

1214	6.5	MEDIUM Network	linuxfoundation	backstage\/plugin-scaffolder-backend	Backstage is an open framework for building developer portals. Prior to version 3.1.4, a malicious scaffolder template can bypass the log redaction mechanism to exfiltrate secrets provided run throug…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-29184	2026-04-26 03:01	2026-03-8	Show	GitHub Exploit DB Packet Storm

1215	6.5	MEDIUM Network	linuxfoundation	backstage\/plugin-scaffolder-backend	Backstage es un framework abierto para construir portales de desarrolladores. Antes de la versión 3.1.4, una plantilla de andamiaje maliciosa puede eludir el mecanismo de redacción de registros para …	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2026-29184	2026-04-26 03:01	2026-03-8	Show	GitHub Exploit DB Packet Storm

1216	9.8	CRITICAL Network	n2ws	n2w	In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.	CWE-290 Authentication Bypass by Spoofing	CVE-2025-59707	2026-04-26 03:01	2026-03-26	Show	GitHub Exploit DB Packet Storm

1217	9.8	CRITICAL Network	n2ws	n2w	En N2W antes de 4.3.2 y 4.4.x antes de 4.4.1, existe potencial ejecución remota de código y robo de credenciales de cuenta debido a una vulnerabilidad de suplantación de identidad.	CWE-290 Authentication Bypass by Spoofing	CVE-2025-59707	2026-04-26 03:01	2026-03-26	Show	GitHub Exploit DB Packet Storm

1218	9.8	CRITICAL Network	n2ws	n2w	In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.	CWE-290 Authentication Bypass by Spoofing	CVE-2025-59706	2026-04-26 03:01	2026-03-26	Show	GitHub Exploit DB Packet Storm

1219	9.8	CRITICAL Network	n2ws	n2w	En N2W antes de 4.3.2 y 4.4.0 antes de 4.4.1, la validación indebida de los parámetros de solicitud de la API permite la ejecución remota de código.	CWE-290 Authentication Bypass by Spoofing	CVE-2025-59706	2026-04-26 03:01	2026-03-26	Show	GitHub Exploit DB Packet Storm

1220	9.8	CRITICAL Network	filigran	openaev	OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Starting in version 1.0.0 and prior to version 2.0.13, OpenAEV's…	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2026-24467	2026-04-26 03:00	2026-04-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed