Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
521 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-0900 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
522 5.4 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-0901 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
523 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける一貫性のない実装を含む機能の使用に関する脆弱性 CWE-474
一貫性のない実装を含む機能の使用 		CVE-2026-0902 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
524 5.4 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-0903 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
525 5.4 警告
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-0904 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
526 9.8 緊急
Network 		Google Google Chrome GoogleのGoogle Chromeにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-0905 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
527 9.8 緊急
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-0906 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
528 9.8 緊急
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2026-0907 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
529 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-0908 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
530 7.5 重要
Network 		Eclipse Foundation Vert.x-Web Eclipse FoundationのVert.x-WebにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-1002 2026-02-2 19:38 2026-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
461 7.5 HIGH
Network 		- - basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote FTP server. A mal… New CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41324 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
462 - - - Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Redirect parameter on login page is vulnerable to reflected XSS… New CWE-79
Cross-site Scripting 		CVE-2026-41430 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
463 7.7 HIGH
Network 		- - Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the `forEach` mutation handler allows any user wit… New CWE-617
 Reachable Assertion 		CVE-2026-41485 2026-04-24 23:50 2026-04-24 Show GitHub Exploit DB Packet Storm
464 7.6 HIGH
Network 		wger wger wger is a free, open-source workout and fitness manager. In versions 2.5 and below, the GymConfigUpdateView declares permission_required = 'config.change_gymconfig' but inherits WgerFormMixin instead… Update CWE-284
CWE-862
Improper Access Control
 Missing Authorization 		CVE-2026-40474 2026-04-24 23:46 2026-04-18 Show GitHub Exploit DB Packet Storm
465 5.4 MEDIUM
Network 		wger wger wger is a free, open-source workout and fitness manager. In versions 2.5 and below, the attribution_link property in AbstractLicenseModel constructs HTML by directly interpolating user-controlled lic… Update CWE-79
Cross-site Scripting 		CVE-2026-40353 2026-04-24 23:46 2026-04-18 Show GitHub Exploit DB Packet Storm
466 - - - Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the `RestoreController.PostRestoreJob` endpoint allows an administrator to supply an … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41170 2026-04-24 23:45 2026-04-23 Show GitHub Exploit DB Packet Storm
467 - - - Squidex is an open source headless content management system and content management hub. Versions prior to 7.23.0 have a Server-Side Request Forgery (SSRF) vulnerability due to missing SSRF protectio… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41171 2026-04-24 23:45 2026-04-23 Show GitHub Exploit DB Packet Storm
468 - - - Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, an SSRF vulnerability allows a user with asset upload permission to force the server … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41172 2026-04-24 23:45 2026-04-23 Show GitHub Exploit DB Packet Storm
469 5.5 MEDIUM
Network 		- - Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). Th… New CWE-73
CWE-918
 External Control of File Name or Path
Server-Side Request Forgery (SSRF)  		CVE-2026-41177 2026-04-24 23:45 2026-04-23 Show GitHub Exploit DB Packet Storm
470 7.8 HIGH
Local 		- - A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger … New CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-33999 2026-04-24 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm