Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200721 3.5 注意 The phpMyAdmin Project - phpMyAdmin の js/normalization.js の goToFinish1NF 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2043 2016-02-25 14:52 2016-01-24 Show GitHub Exploit DB Packet Storm
200722 5 警告 The phpMyAdmin Project - phpMyAdmin における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2042 2016-02-25 14:52 2016-01-24 Show GitHub Exploit DB Packet Storm
200723 5 警告 The phpMyAdmin Project - phpMyAdmin の libraries/common.inc.php におけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-2041 2016-02-25 14:52 2016-01-24 Show GitHub Exploit DB Packet Storm
200724 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2040 2016-02-25 14:52 2016-01-24 Show GitHub Exploit DB Packet Storm
200725 5 警告 The phpMyAdmin Project - phpMyAdmin の libraries/session.inc.php におけるアクセス制限を回避される脆弱性 CWE-200
情報漏えい
CVE-2016-2039 2016-02-25 14:52 2016-01-24 Show GitHub Exploit DB Packet Storm
200726 5 警告 The phpMyAdmin Project - phpMyAdmin における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2038 2016-02-25 14:52 2016-01-23 Show GitHub Exploit DB Packet Storm
200727 4.3 警告 IBM - IBM Security Access Manager for Web および Security Access Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8531 2016-02-25 13:43 2015-12-8 Show GitHub Exploit DB Packet Storm
200728 7.6 危険 オラクル - Oracle Java SE における Install に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0603 2016-02-25 12:27 2016-02-5 Show GitHub Exploit DB Packet Storm
200729 4.3 警告 OpenJPEG project - OpenJPEG の opj_tgt_reset 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1924 2016-02-25 11:27 2016-01-18 Show GitHub Exploit DB Packet Storm
200730 5 警告 The Go Project - Go の math/big ライブラリ内の Int.Exp Montgomery コードにおける RSA 秘密鍵を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-8618 2016-02-25 11:22 2015-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 8.8 HIGH
Network
- - OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Versions prior to 2.1.1 contain an RCE vulnerability in the .github/workfl… New CWE-94
CWE-95
Code Injection
Eval Injection
CVE-2026-40316 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
192 8.2 HIGH
Network
- - maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP injection vulnerability in the auth.ldap module where user-supplied usernames are interpolated into LDAP search … New CWE-90
LDAP Injection
CVE-2026-40193 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
193 8.8 HIGH
Network
- - OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative commands by exploiting insufficient… New CWE-862
 Missing Authorization
CVE-2026-40502 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
194 6.5 MEDIUM
Network
- - OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path traversal sequences to the /mem… New CWE-22
Path Traversal
CVE-2026-40503 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
195 9.3 CRITICAL
Local
- - Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod. New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-40959 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
196 8.1 HIGH
Local
- - Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trusted_mods or secure.http_mods, then a crafted mod can intercept the re… New CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2026-40960 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
197 7.5 HIGH
Network
- - Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions 4.2.1 and below contain an information disclosure vulnerability in the UDR (Unified Data Repo… New CWE-200
CWE-202
CWE-209
Information Exposure
 Exposure of Sensitive Information Through Data Queries
Information Exposure Through an Error Message
CVE-2026-40245 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
198 9.8 CRITICAL
Network
- - Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string li… New CWE-122
Heap-based Buffer Overflow
CVE-2026-40504 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
199 4.9 MEDIUM
Local
- - FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c. New CWE-190
 Integer Overflow or Wraparound
CVE-2026-40962 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm
200 7.4 HIGH
Local
- - radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release… New CWE-78
OS Command 
CVE-2026-41015 2026-04-18 00:38 2026-04-16 Show GitHub Exploit DB Packet Storm