Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
199761 7.2 重要
Network 		dotCMS - dotCMS の Workflow Screen における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-4040 2016-04-27 16:34 2016-04-12 Show GitHub Exploit DB Packet Storm
199762 7.8 重要
Local 		Google - Android の rootdir/init.rc における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2420 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
199763 7.8 重要
Local 		Google - Android の System_server で使用される Skia の include/core/SkPostConfig.h における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2412 2016-04-27 16:29 2016-04-4 Show GitHub Exploit DB Packet Storm
199764 5.3 警告
Network 		Magento, Inc. - Magento Enterprise Edition および Community Edition の app/code/core/Mage/Rss/Helper/Order.php における重要な注文情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-2212 2016-04-27 16:08 2016-02-23 Show GitHub Exploit DB Packet Storm
199765 8.1 重要
Network 		Drupal
Debian		 - Drupal の File モジュールにおけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-3162 2016-04-27 15:43 2016-02-24 Show GitHub Exploit DB Packet Storm
199766 8.1 重要
Network 		Apache Software Foundation - Apache Camel における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2015-5348 2016-04-27 15:26 2015-11-12 Show GitHub Exploit DB Packet Storm
199767 8.4 重要
Local 		NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおける重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2016-2558 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
199768 8.4 重要
Local 		NVIDIA - Windows 上で稼動する NVIDIA GPU グラフィックドライバのカーネルモードドライバレイヤの Escape インターフェースにおけるカーネルメモリから重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2557 2016-04-27 15:12 2016-03-14 Show GitHub Exploit DB Packet Storm
199769 5.3 警告
Network 		OpenStack - OpenStack Compute の libvirt ドライバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2016-2140 2016-04-27 12:25 2016-03-8 Show GitHub Exploit DB Packet Storm
199770 6.2 警告
Local 		FreeBSD - FreeBSD の sys/amd64/amd64/sys_machdep.c の amd64_set_ldt 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー 		CVE-2016-1885 2016-04-27 11:52 2016-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
501 5.1 MEDIUM
Local 		- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a h… Update CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-34238 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
502 6.2 MEDIUM
Local 		- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap write when writing a y… Update CWE-122
CWE-787
Heap-based Buffer Overflow
 Out-of-bounds Write 		CVE-2026-40169 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
503 5.5 MEDIUM
Local 		- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user specifies that the im… Update CWE-122
Heap-based Buffer Overflow 		CVE-2026-40183 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
504 5.5 MEDIUM
Local 		- - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the JP2 encoder with w… Update CWE-122
CWE-787
Heap-based Buffer Overflow
 Out-of-bounds Write 		CVE-2026-40310 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
505 5.5 MEDIUM
Local 		- - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash… Update CWE-416
CWE-693
 Use After Free
 Protection Mechanism Failure 		CVE-2026-40311 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
506 6.2 MEDIUM
Local 		- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malico… Update CWE-193
 Off-by-one Error 		CVE-2026-40312 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
507 6.1 MEDIUM
Local 		- - jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9, the _strindices builtin in jq's src/builtin.c passes its arguments directly to jv_string_indexes() with… Update CWE-125
CWE-476
CWE-843
Out-of-bounds Read
 NULL Pointer Dereference
Type Confusion 		CVE-2026-39956 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
508 - - - jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer with an explicit length parameter, but its … Update CWE-125
Out-of-bounds Read 		CVE-2026-39979 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
509 - - - jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When read… Update CWE-20
CWE-170
 Improper Input Validation 
 Improper Null Termination 		CVE-2026-33948 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
510 5.3 MEDIUM
Network 		- - nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. In versions 1.2.2 and below, an unauthenticated p2p peer can cause th… Update CWE-617
 Reachable Assertion 		CVE-2026-34069 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm