Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199081 5.5 警告
Local
ヒューレット・パッカード・エンタープライズ - HPE RESTful Interface Tool における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2023 2016-06-2 14:03 2016-05-17 Show GitHub Exploit DB Packet Storm
199082 5.9 警告
Network
DELL EMC (旧 EMC Corporation) - EMC Isilon OneFS および IsilonSD Edge OneFS における SMB クライアントになりすまされる脆弱性 CWE-Other
その他
CVE-2016-0907 2016-06-2 13:49 2016-05-26 Show GitHub Exploit DB Packet Storm
199083 8 重要
Network
Resource Data Management Ltd - Resource Data Management Intuitive 650 TDB Controller デバイスにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4506 2016-06-2 12:26 2016-05-19 Show GitHub Exploit DB Packet Storm
199084 8.8 重要
Network
Resource Data Management Ltd - Resource Data Management Intuitive 650 TDB Controller デバイスにおける任意のパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-4505 2016-06-2 12:26 2016-05-19 Show GitHub Exploit DB Packet Storm
199085 3.1
Network
FileMaker, Inc - FileMaker Server において PHP ソースコードが閲覧可能な問題 CWE-20
不適切な入力確認
CVE-2016-1208 2016-06-2 09:42 2016-05-13 Show GitHub Exploit DB Packet Storm
199086 8.2 重要
Network
The PHP Group
アップル
- PHP の PHAR エクステンションの zip.c 内の phar_parse_zipfile 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-3142 2016-06-1 17:18 2016-03-3 Show GitHub Exploit DB Packet Storm
199087 9.8 緊急
Network
The PHP Group
アップル
- PHP の WDDX エクステンションの wddx.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-3141 2016-06-1 17:18 2016-03-3 Show GitHub Exploit DB Packet Storm
199088 6.8 警告
Network
Dell SecureWorks - Apple iOS 用 Dell SecureWorks モバイルアプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2016-2268 2016-06-1 17:08 2016-02-2 Show GitHub Exploit DB Packet Storm
199089 5.6 警告
Network
WP Ninjas, LLC. - WordPress 用プラグイン「Ninja Forms」における PHP オブジェクトインジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2016-1209 2016-06-1 17:01 2016-05-13 Show GitHub Exploit DB Packet Storm
199090 4.3 警告
Adjacent
株式会社アイ・オー・データ機器 - WN-GDN/R3 シリーズにおいて認証試行回数が制限されていない脆弱性 CWE-287
不適切な認証
CVE-2016-1206 2016-06-1 16:50 2016-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 8.2 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise contains an authentication bypass vulnerability that allows an unauthenticated attacke… New CWE-306
Missing Authentication for Critical Function
CVE-2026-41273 2026-04-25 01:35 2026-04-24 Show GitHub Exploit DB Packet Storm
332 9.8 CRITICAL
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerability allows remote attackers to bypass authentication on affected installations … New CWE-287
Improper Authentication
CVE-2026-41276 2026-04-25 01:32 2026-04-24 Show GitHub Exploit DB Packet Storm
333 7.5 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GET /api/v1/public-chatflows/:id endpoint returns the full chatflow object without sanitiz… New CWE-200
Information Exposure
CVE-2026-41278 2026-04-25 01:31 2026-04-24 Show GitHub Exploit DB Packet Storm
334 7.5 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint (POST /api/v1/text-to-speech/generate) is whitelisted (… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-41279 2026-04-25 01:31 2026-04-24 Show GitHub Exploit DB Packet Storm
335 9.8 CRITICAL
Network
- - radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metachara… New - CVE-2026-6942 2026-04-25 01:16 2026-04-24 Show GitHub Exploit DB Packet Storm
336 - - - Rejected reason: This CVE is a duplicate of another CVE. New - CVE-2026-40609 2026-04-25 01:16 2026-04-25 Show GitHub Exploit DB Packet Storm
337 8.8 HIGH
Network
mozilla firefox
thunderbird
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. New CWE-269
 Improper Privilege Management
CVE-2026-6750 2026-04-25 00:16 2026-04-21 Show GitHub Exploit DB Packet Storm
338 7.1 HIGH
Local
- - A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exists at the target pa… New CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-35341 2026-04-25 00:16 2026-04-23 Show GitHub Exploit DB Packet Storm
339 4.3 MEDIUM
Network
- - In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.10, the endpoints /api/apps/logs and /api/apps/:id/logs have a typo in the required permission check, allowing… New CWE-284
Improper Access Control
CVE-2026-29197 2026-04-25 00:16 2026-04-24 Show GitHub Exploit DB Packet Storm
340 8.8 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, The CSVAgent allows providing a custom Pandas CSV read code. Due to lack of sanitization, an a… New CWE-94
Code Injection
CVE-2026-41137 2026-04-25 00:15 2026-04-24 Show GitHub Exploit DB Packet Storm