Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251171 6.8 警告 アップル - Apple Mac OS X の Apple Type Services サーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0177 2011-04-25 10:24 2011-03-23 Show GitHub Exploit DB Packet Storm
251172 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0176 2011-04-25 10:23 2011-03-23 Show GitHub Exploit DB Packet Storm
251173 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0175 2011-04-25 10:23 2011-03-23 Show GitHub Exploit DB Packet Storm
251174 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0174 2011-04-25 10:22 2011-03-23 Show GitHub Exploit DB Packet Storm
251175 6.8 警告 アップル - Apple Mac OS X における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2011-0173 2011-04-25 10:21 2011-03-23 Show GitHub Exploit DB Packet Storm
251176 4.9 警告 アップル - Apple Mac OS X におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-0172 2011-04-25 10:20 2011-03-23 Show GitHub Exploit DB Packet Storm
251177 7.5 危険 アップル
ClamAV		 - ClamAV の libclamav の pdf.c における任意のコードを実行される脆弱性性 CWE-noinfo
情報不足 		CVE-2010-4479 2011-04-25 10:19 2010-12-7 Show GitHub Exploit DB Packet Storm
251178 7.5 危険 アップル
ClamAV		 - ClamAV の libclamav の pe_icons.c 内にある icon_cb 関数における一つずれエラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4261 2011-04-25 10:17 2010-12-7 Show GitHub Exploit DB Packet Storm
251179 5 警告 アップル
ClamAV		 - ClamAV の libclamav の pdf.c における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4260 2011-04-21 18:57 2010-12-7 Show GitHub Exploit DB Packet Storm
251180 9.3 危険 アップル
ClamAV		 - ClamAV の find_stream_bounds 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3434 2011-04-21 17:56 2010-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
881 9.8 CRITICAL
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without para… New CWE-89
SQL Injection 		CVE-2026-41462 2026-04-28 03:36 2026-04-28 Show GitHub Exploit DB Packet Storm
882 8.8 HIGH
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload permissions to write files outs… New CWE-22
Path Traversal 		CVE-2026-41463 2026-04-28 03:36 2026-04-28 Show GitHub Exploit DB Packet Storm
883 6.5 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level privileges to retrieve sensitive … New CWE-862
 Missing Authorization 		CVE-2026-41464 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
884 6.5 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contains a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequ… New CWE-22
Path Traversal 		CVE-2026-41465 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
885 5.4 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the checkValidHtmlText() function within Security.php that fails to properly sanitize user input by only d… New CWE-79
Cross-site Scripting 		CVE-2026-41466 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
886 5.4 MEDIUM
Network 		- - ProjeQtor versions 7.0 through 12.4.3 contain a stored cross-site scripting vulnerability in the file upload functionality where the checkValidFileName() function fails to restrict HTML and HTM file … New CWE-79
Cross-site Scripting 		CVE-2026-41467 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
887 - - - authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either bec… New CWE-842
 Placement of User into Incorrect Group 		CVE-2026-6970 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
888 9.8 CRITICAL
Network 		- - A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a man… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7136 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
889 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipula… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7137 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
890 9.8 CRITICAL
Network 		- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7138 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm