Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251831 9 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4675 2011-02-23 15:09 2011-01-7 Show GitHub Exploit DB Packet Storm
251832 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4673 2011-02-23 15:05 2011-01-7 Show GitHub Exploit DB Packet Storm
251833 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4672 2011-02-23 14:59 2011-01-7 Show GitHub Exploit DB Packet Storm
251834 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5037 2011-02-23 14:56 2011-01-7 Show GitHub Exploit DB Packet Storm
251835 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4692 2011-02-23 14:54 2011-01-7 Show GitHub Exploit DB Packet Storm
251836 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4691 2011-02-23 14:50 2011-01-7 Show GitHub Exploit DB Packet Storm
251837 5.1 警告 Lunascape - Lunascape における実行ファイル読み込みに関する脆弱性 CWE-Other
その他
CVE-2011-0452 2011-02-23 14:01 2011-02-23 Show GitHub Exploit DB Packet Storm
251838 5 警告 Google
レッドハット
- WebKit の CSSParser::parseFontFaceSrc 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2010-4577 2011-02-22 14:07 2010-12-13 Show GitHub Exploit DB Packet Storm
251839 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイス上で稼働する Mobile User Security における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-4690 2011-02-22 13:58 2011-01-7 Show GitHub Exploit DB Packet Storm
251840 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4689 2011-02-22 13:56 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1651 6.5 MEDIUM
Network
totolink a3300r_firmware An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the interval parameter to /cgi-bin/cstecgi.cgi. CWE-77
Command Injection
CVE-2026-31173 2026-04-27 23:54 2026-04-24 Show GitHub Exploit DB Packet Storm
1652 5.4 MEDIUM
Network
mintplexlabs anythingllm AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, AnythingLLM's in-chat markdown renderer has an uns… CWE-79
CWE-116
CWE-1336
Cross-site Scripting
 Improper Encoding or Escaping of Output
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-41318 2026-04-27 23:53 2026-04-24 Show GitHub Exploit DB Packet Storm
1653 8.8 HIGH
Network
goshs goshs goshs is a SimpleHTTPServer written in Go. From 2.0.0-beta.4 to 2.0.0-beta.5, goshs leaks file-based ACL credentials through its public collaborator feed when the server is deployed without global ba… CWE-200
NVD-CWE-noinfo
Information Exposure
CVE-2026-40885 2026-04-27 23:51 2026-04-22 Show GitHub Exploit DB Packet Storm
1654 8.7 HIGH
Local
linaro op-tee OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 through 4.10.0, mi… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2026-33317 2026-04-27 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
1655 6.5 MEDIUM
Network
apache activemq
activemq_web
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious content when browsin… CWE-79
CWE-915
Cross-site Scripting
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-41043 2026-04-27 23:49 2026-04-24 Show GitHub Exploit DB Packet Storm
1656 8.8 HIGH
Network
apache activemq
activemq_broker
Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All. An authenticated attacker can use … CWE-20
CWE-94
 Improper Input Validation 
Code Injection
CVE-2026-41044 2026-04-27 23:49 2026-04-24 Show GitHub Exploit DB Packet Storm
1657 9.8 CRITICAL
Network
ericsson codechecker CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the URL ends with Authentication with certain… CWE-290
CWE-863
 Authentication Bypass by Spoofing
 Incorrect Authorization
CVE-2026-25660 2026-04-27 23:48 2026-04-24 Show GitHub Exploit DB Packet Storm
1658 8.8 HIGH
Network
mathjs mathjs Math.js is an extensive math library for JavaScript and Node.js. From 13.1.1 to before 15.2.0, a vulnerability allowed executing arbitrary JavaScript via the expression parser of mathjs. You can be a… CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-40897 2026-04-27 23:47 2026-04-25 Show GitHub Exploit DB Packet Storm
1659 4.3 MEDIUM
Network
xibosignage xibo Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4.4.1, any authenticated user can manually construct a URL t… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-31956 2026-04-27 23:44 2026-04-24 Show GitHub Exploit DB Packet Storm
1660 4.9 MEDIUM
Network
xibosignage xibo Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated Server-Side Request Forgery (SSRF) vulnerability in versions… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-31955 2026-04-27 23:43 2026-04-24 Show GitHub Exploit DB Packet Storm