Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201771 6.8 警告 Foxit Software Inc - Foxit Reader および PhantomPDF の Print メソッドおよび App オブジェクトの処理における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-8580 2015-12-18 17:57 2015-10-8 Show GitHub Exploit DB Packet Storm
201772 5 警告 Debian
PHPMailer project
- PHPMailer における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2015-8476 2015-12-18 17:34 2015-11-1 Show GitHub Exploit DB Packet Storm
201773 6.4 警告 カスペルスキー - Kaspersky Total Security における DEP および ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8579 2015-12-18 16:54 2015-12-8 Show GitHub Exploit DB Packet Storm
201774 6.4 警告 AVG Technologies - AVG Internet Security における DEP および ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8578 2015-12-18 16:54 2015-12-8 Show GitHub Exploit DB Packet Storm
201775 2.6 注意 マカフィー - McAfee VirusScan Enterprise のバッファオーバーフロー保護機能における DEP および ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8577 2015-12-18 16:54 2015-08-26 Show GitHub Exploit DB Packet Storm
201776 5 警告 シスコシステムズ - Cisco Unified Communications Manager の WebApplications Identity Management サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-6425 2015-12-18 15:41 2015-12-15 Show GitHub Exploit DB Packet Storm
201777 5 警告 シスコシステムズ - Cisco FirePOWER Management Center における重要なバージョン情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-6411 2015-12-18 15:35 2015-12-9 Show GitHub Exploit DB Packet Storm
201778 4 警告 シスコシステムズ - Cisco Hosted Collaboration Mediation Fulfillment における重要な資格情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-6404 2015-12-18 15:35 2015-12-10 Show GitHub Exploit DB Packet Storm
201779 7.2 危険 シスコシステムズ - 複数の Cisco Small Business SPA 電話機の TFTP の実装におけるトロイの木馬のイメージをロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2015-6403 2015-12-18 15:35 2015-12-9 Show GitHub Exploit DB Packet Storm
201780 6.8 警告 シスコシステムズ - Cisco Integrated Management Controller の Supervisor におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-6399 2015-12-18 15:35 2015-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221 8.2 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise contains an authentication bypass vulnerability that allows an unauthenticated attacke… New CWE-306
Missing Authentication for Critical Function
CVE-2026-41273 2026-04-25 01:35 2026-04-24 Show GitHub Exploit DB Packet Storm
222 7.5 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password reset functionality on cloud.flowiseai.com sends a reset password link over the u… New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2026-41275 2026-04-25 01:34 2026-04-24 Show GitHub Exploit DB Packet Storm
223 9.8 CRITICAL
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, this vulnerability allows remote attackers to bypass authentication on affected installations … New CWE-287
Improper Authentication
CVE-2026-41276 2026-04-25 01:32 2026-04-24 Show GitHub Exploit DB Packet Storm
224 7.5 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the GET /api/v1/public-chatflows/:id endpoint returns the full chatflow object without sanitiz… New CWE-200
Information Exposure
CVE-2026-41278 2026-04-25 01:31 2026-04-24 Show GitHub Exploit DB Packet Storm
225 7.5 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint (POST /api/v1/text-to-speech/generate) is whitelisted (… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-41279 2026-04-25 01:31 2026-04-24 Show GitHub Exploit DB Packet Storm
226 9.8 CRITICAL
Network
- - radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metachara… New - CVE-2026-6942 2026-04-25 01:16 2026-04-24 Show GitHub Exploit DB Packet Storm
227 - - - Rejected reason: This CVE is a duplicate of another CVE. New - CVE-2026-40609 2026-04-25 01:16 2026-04-25 Show GitHub Exploit DB Packet Storm
228 8.8 HIGH
Network
mozilla firefox
thunderbird
Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. New CWE-269
 Improper Privilege Management
CVE-2026-6750 2026-04-25 00:16 2026-04-21 Show GitHub Exploit DB Packet Storm
229 7.1 HIGH
Local
- - A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exists at the target pa… New CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-35341 2026-04-25 00:16 2026-04-23 Show GitHub Exploit DB Packet Storm
230 4.3 MEDIUM
Network
- - In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.10, the endpoints /api/apps/logs and /api/apps/:id/logs have a typo in the required permission check, allowing… New CWE-284
Improper Access Control
CVE-2026-29197 2026-04-25 00:16 2026-04-24 Show GitHub Exploit DB Packet Storm