Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228641 5 警告 plain old webserver - Mozilla Firefox 用の POW アドオンにおけるディレクトリトラバーサルの脆弱性 - CVE-2007-0872 2012-12-20 18:19 2007-02-12 Show GitHub Exploit DB Packet Storm
228642 5 警告 Yahoo! - Yahoo! Messenger の Chat Room 機能におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0868 2012-12-20 18:19 2007-02-9 Show GitHub Exploit DB Packet Storm
228643 7.5 危険 site-assistant - Site-Assistant の classes/menu.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0867 2012-12-20 18:19 2007-02-9 Show GitHub Exploit DB Packet Storm
228644 6.8 警告 RARLAB - WinRAR などの製品に同梱されている RARLabs Unrar におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-0855 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228645 7.5 危険 techexcel inc. - DevTrack における SQL インジェクションの脆弱性 - CVE-2007-0853 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228646 6.8 警告 techexcel inc. - DevTrack におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0852 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228647 7.5 危険 syscp team - SysCP の scripts/cronscript.php における任意のコードを実行される脆弱性 - CVE-2007-0850 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228648 7.2 危険 syscp team - SysCP の scripts/cronscript.php における権限を取得される脆弱性 - CVE-2007-0849 2012-12-20 18:19 2007-02-8 Show GitHub Exploit DB Packet Storm
228649 10 危険 vbdrupal - vbDrupal における脆弱性 - CVE-2007-0841 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
228650 7.5 危険 Wafer - Valarsoft WebMatic の index/index_album.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0839 2012-12-20 18:19 2007-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 3.3 LOW
Local 		chainguard melange melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, `melange lint --persist-lint-results` (opt-in flag, also usable via `me… CWE-22
Path Traversal 		CVE-2026-29051 2026-04-27 23:42 2026-04-24 Show GitHub Exploit DB Packet Storm
1082 8.1 HIGH
Network 		xibosignage xibo Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 through 4.4.0 have an SQL injection vulnerability in the API rou… CWE-89
CWE-184
SQL Injection
 Incomplete Blacklist 		CVE-2026-31952 2026-04-27 23:33 2026-04-24 Show GitHub Exploit DB Packet Storm
1083 6.1 MEDIUM
Local 		chainguard melange melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, an attacker who can influence a melange configuration file — for exampl… CWE-22
Path Traversal 		CVE-2026-29050 2026-04-27 23:31 2026-04-24 Show GitHub Exploit DB Packet Storm
1084 - - - In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw_event() Commit ecfa6f34492c ("HID: Add HID_CLAIMED_INPUT guards in raw_event … - CVE-2026-31625 2026-04-27 23:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1085 - - - In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Much like commit 19f953e74356 ("fbdev: fb_pm2fb: Avoid potential divide… - CVE-2026-31605 2026-04-27 23:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1086 - - - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while … - CVE-2026-31604 2026-04-27 23:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1087 - - - In the Linux kernel, the following vulnerability has been resolved: staging: sm750fb: fix division by zero in ps_to_hz() ps_to_hz() is called from hw_sm750_crtc_set_mode() without validating that p… - CVE-2026-31603 2026-04-27 23:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1088 - - - In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections syzbot reported a general protection fault in vidt… - CVE-2026-31599 2026-04-27 23:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1089 - - - In the Linux kernel, the following vulnerability has been resolved: media: em28xx: fix use-after-free in em28xx_v4l2_open() em28xx_v4l2_open() reads dev->v4l2 without holding dev->lock, creating a … - CVE-2026-31583 2026-04-27 23:16 2026-04-25 Show GitHub Exploit DB Packet Storm
1090 - - - In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix use-after-free on disconnect In usb6fire_chip_abort(), the chip struct is allocated as the card's private data (… - CVE-2026-31581 2026-04-27 23:16 2026-04-25 Show GitHub Exploit DB Packet Storm