Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199941 7.5 重要
Network
Debian
Pivotal Software, Inc.
- Redis の lua_struct.c の getnum 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-8080 2016-04-21 15:26 2015-12-18 Show GitHub Exploit DB Packet Storm
199942 7.3 重要
Network
openSUSE project
Claws Mail
- Claws Mail の codeconv.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8614 2016-04-21 14:58 2015-11-5 Show GitHub Exploit DB Packet Storm
199943 4.2 警告
Network
The Foreman
レッドハット
- Foreman における任意のホストからのレポートを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5233 2016-04-21 12:23 2015-09-1 Show GitHub Exploit DB Packet Storm
199944 2.5
Local
レッドハット - libvirt の storage/storage_backend_fs.c の virStorageBackendFileSystemVolCreate 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-5313 2016-04-21 11:38 2015-12-11 Show GitHub Exploit DB Packet Storm
199945 6.1 警告
Network
Apache Software Foundation - Apache Jetspeed におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0712 2016-04-21 11:10 2016-03-3 Show GitHub Exploit DB Packet Storm
199946 6.1 警告
Network
Apache Software Foundation - Apache Jetspeed におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-0711 2016-04-21 11:10 2016-03-3 Show GitHub Exploit DB Packet Storm
199947 8.8 重要
Network
Apache Software Foundation - Apache Jetspeed の User Manager サービスにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-0710 2016-04-21 11:10 2016-03-3 Show GitHub Exploit DB Packet Storm
199948 7.2 重要
Network
Apache Software Foundation - Apache Jetspeed の Portal Site Manager の Import/Export 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-0709 2016-04-21 11:10 2016-03-3 Show GitHub Exploit DB Packet Storm
199949 7.2 重要
Network
Palo Alto Networks - Palo Alto Networks PAN-OS のデバイス管理コマンドラインインターフェースにおける任意の OS コマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-3654 2016-04-21 10:20 2016-03-24 Show GitHub Exploit DB Packet Storm
199950 9.1 緊急
Network
アドビシステムズ - Adobe Creative Cloud デスクトップアプリケーションにおける任意のファイルを読み書きされる脆弱性 CWE-noinfo
情報不足
CVE-2016-1034 2016-04-21 10:16 2016-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
701 5.5 MEDIUM
Local
- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an s… CWE-125
Out-of-bounds Read
CVE-2026-33905 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
702 7.5 HIGH
Network
- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the `DestroyX… CWE-674
 Uncontrolled Recursion
CVE-2026-33908 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
703 6.2 MEDIUM
Local
- - jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sorted() in jq's src/jv_aux.c use unbounded recursion whose depth is controlled by… CWE-674
 Uncontrolled Recursion
CVE-2026-33947 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
704 5.1 MEDIUM
Local
- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a h… CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write
CVE-2026-34238 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
705 6.2 MEDIUM
Local
- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap write when writing a y… CWE-122
CWE-787
Heap-based Buffer Overflow
 Out-of-bounds Write
CVE-2026-40169 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
706 5.5 MEDIUM
Local
- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user specifies that the im… CWE-122
Heap-based Buffer Overflow
CVE-2026-40183 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
707 5.5 MEDIUM
Local
- - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the JP2 encoder with w… CWE-122
CWE-787
Heap-based Buffer Overflow
 Out-of-bounds Write
CVE-2026-40310 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
708 5.5 MEDIUM
Local
- - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash… CWE-416
CWE-693
 Use After Free
 Protection Mechanism Failure
CVE-2026-40311 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
709 6.2 MEDIUM
Local
- - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a crash when a malico… CWE-193
 Off-by-one Error
CVE-2026-40312 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm
710 6.1 MEDIUM
Local
- - jq is a command-line JSON processor. In commits after 69785bf77f86e2ea1b4a20ca86775916889e91c9, the _strindices builtin in jq's src/builtin.c passes its arguments directly to jv_string_indexes() with… CWE-125
CWE-476
CWE-843
Out-of-bounds Read
 NULL Pointer Dereference
Type Confusion
CVE-2026-39956 2026-04-18 00:26 2026-04-14 Show GitHub Exploit DB Packet Storm