Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251921 4.3 警告 Opera Software ASA - Opera におけるポップアップブロッカーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2662 2010-09-27 16:20 2010-07-1 Show GitHub Exploit DB Packet Storm
251922 4.3 警告 Opera Software ASA - Opera における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2661 2010-09-27 16:19 2010-06-21 Show GitHub Exploit DB Packet Storm
251923 4.3 警告 Opera Software ASA - Opera における IDN ドメインになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2660 2010-09-27 16:19 2010-06-21 Show GitHub Exploit DB Packet Storm
251924 4.3 警告 Opera Software ASA - Opera における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2659 2010-09-27 16:19 2010-03-2 Show GitHub Exploit DB Packet Storm
251925 4.3 警告 Opera Software ASA - Opera における任意のファイルのアップロードを誘発させられる脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2658 2010-09-27 16:19 2010-07-1 Show GitHub Exploit DB Packet Storm
251926 9.3 危険 Opera Software ASA - Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2657 2010-09-27 16:18 2010-07-1 Show GitHub Exploit DB Packet Storm
251927 6.8 警告 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2576 2010-09-27 16:18 2010-08-12 Show GitHub Exploit DB Packet Storm
251928 4.3 警告 Opera Software ASA - Opera におけるアドレスバーの処理に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2455 2010-09-27 16:18 2010-06-28 Show GitHub Exploit DB Packet Storm
251929 10 危険 Opera Software ASA - Opera における脆弱性 CWE-noinfo
情報不足 		CVE-2010-2421 2010-09-27 16:18 2010-06-21 Show GitHub Exploit DB Packet Storm
251930 4.3 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2121 2010-09-27 16:18 2010-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251 9.8 CRITICAL
Network 		- - A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setWiFiWpsStart of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of th… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7202 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
252 6.8 MEDIUM
Network 		- - A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras. New CWE-78
OS Command  		CVE-2026-32649 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
253 9.8 CRITICAL
Network 		- - Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys. New CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-32644 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
254 8.8 HIGH
Network 		- - An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras. New CWE-122
Heap-based Buffer Overflow 		CVE-2026-20766 2026-04-28 10:16 2026-04-28 Show GitHub Exploit DB Packet Storm
255 4.3 MEDIUM
Network 		- - A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=types. Executing a manipulation of th… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-7200 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
256 7.3 HIGH
Network 		- - A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_product. Perform… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7199 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
257 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the file /guestdetails. Such manipulation of the argument deleteid leads to sql inject… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7196 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
258 4.7 MEDIUM
Local 		- - When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file's location can corrupt one file on the host each time the application is starte… New CWE-59
Link Following 		CVE-2026-40977 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
259 9.1 CRITICAL
Network 		- - In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web applica… New CWE-862
 Missing Authorization 		CVE-2026-40976 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm
260 4.8 MEDIUM
Network 		- - Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} and ${random.long} should never be used for secrets as they are numeric values wi… New CWE-330
 Use of Insufficiently Random Values 		CVE-2026-40975 2026-04-28 09:16 2026-04-28 Show GitHub Exploit DB Packet Storm