Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203221 6.5 警告
Network
Debian
OptiPNG
- OptiPNG の pngxtern/pngxrbmp.c の bmp_read_rows 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2191 2016-04-20 16:11 2016-04-4 Show GitHub Exploit DB Packet Storm
203222 9.8 緊急
Network
Debian
xmlsoft.org
- libxml2 の HTMLparser.c の htmlParseComment 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2015-8710 2016-04-20 16:10 2015-03-11 Show GitHub Exploit DB Packet Storm
203223 6.1 警告
Network
レッドハット - Spacewalk および Red Hat Satellite の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3079 2016-04-20 16:05 2016-04-4 Show GitHub Exploit DB Packet Storm
203224 5.4 警告
Network
レッドハット - Spacewalk および Red Hat Satellite の spacewalk-java におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0284 2016-04-20 16:05 2016-04-4 Show GitHub Exploit DB Packet Storm
203225 6.5 警告
Network
Debian
Python Software Foundation
- Pillow の libImaging/FliDecode.c の ImagingFliDecode 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-0775 2016-04-20 15:56 2016-02-4 Show GitHub Exploit DB Packet Storm
203226 6.5 警告
Network
Debian
Python Software Foundation
- Pillow の libImaging/TiffDecode.c の ImagingLibTiffDecode 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-0740 2016-04-20 15:56 2016-02-4 Show GitHub Exploit DB Packet Storm
203227 5.9 警告
Network
Debian
Canonical
Fedora Project
libssh
レッドハット
- libssh における SSH セッションを復号される脆弱性 CWE-200
情報漏えい
CVE-2016-0739 2016-04-20 14:42 2016-02-23 Show GitHub Exploit DB Packet Storm
203228 6.5 警告
Network
Canonical
レッドハット
- libvirt の virStorageVolCreateXML API におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-5247 2016-04-20 11:57 2015-09-3 Show GitHub Exploit DB Packet Storm
203229 5.9 警告
Network
Canonical
レッドハット
- libvirt の network/bridge_driver.c の networkReloadIptablesRules 関数におけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2011-4600 2016-04-20 11:57 2011-12-10 Show GitHub Exploit DB Packet Storm
203230 5.5 警告
Local
Xen プロジェクト - Xen および Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3961 2016-04-20 11:46 2016-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
491 9.6 CRITICAL
Network
- - electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler passes any URL clicked in the terminal di… New CWE-88
CWE-601
Argument Injection
Open Redirect
CVE-2026-43941 2026-05-9 00:54 2026-05-8 Show GitHub Exploit DB Packet Storm
492 - - - electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code execution via deep links… New CWE-20
CWE-94
CWE-829
 Improper Input Validation 
Code Injection
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-43944 2026-05-9 00:54 2026-05-8 Show GitHub Exploit DB Packet Storm
493 5.5 MEDIUM
Local
- - electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/app/lib/ipc-sync.js serialises the entire… New CWE-200
CWE-312
Information Exposure
 Cleartext Storage of Sensitive Information
CVE-2026-43942 2026-05-9 00:54 2026-05-8 Show GitHub Exploit DB Packet Storm
494 7.8 HIGH
Local
- - electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists in electerm's SFTP open with system edito… New CWE-78
CWE-88
OS Command 
Argument Injection
CVE-2026-43943 2026-05-9 00:54 2026-05-8 Show GitHub Exploit DB Packet Storm
495 9.8 CRITICAL
Network
- - PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parse_mcp_command(), allowing … New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-41497 2026-05-9 00:53 2026-05-8 Show GitHub Exploit DB Packet Storm
496 - - - PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has b… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44335 2026-05-9 00:53 2026-05-8 Show GitHub Exploit DB Packet Storm
497 6.3 MEDIUM
Network
- - PraisonAI is a multi-agent teams system. From version 2.4.1 to before version 4.6.34, PraisonAI exposes optional SQL/CQL-backed knowledge-store implementations that build table and index identifiers … New CWE-20
CWE-89
 Improper Input Validation 
SQL Injection
CVE-2026-44337 2026-05-9 00:53 2026-05-8 Show GitHub Exploit DB Packet Storm
498 7.3 HIGH
Network
- - PraisonAI is a multi-agent teams system. From version 2.5.6 to before version 4.6.34, PraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any … New CWE-306
CWE-668
CWE-1188
Missing Authentication for Critical Function
 Exposure of Resource to Wrong Sphere
 Insecure Default Initialization of Resource
CVE-2026-44338 2026-05-9 00:53 2026-05-8 Show GitHub Exploit DB Packet Storm
499 8.4 HIGH
Local
- - PraisonAI is a multi-agent teams system. From version 4.5.139 to before version 4.6.32, CVE-2026-40287's fix gated tools.py auto-import behind PRAISONAI_ALLOW_LOCAL_TOOLS=true in two files (tool_reso… New CWE-94
Code Injection
CVE-2026-44334 2026-05-9 00:53 2026-05-8 Show GitHub Exploit DB Packet Storm
500 - - - PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by default — praisonai.rules… New CWE-20
CWE-22
CWE-94
CWE-829
CWE-913
 Improper Input Validation 
Path Traversal
Code Injection
 Inclusion of Functionality from Untrusted Control Sphere
 Improper Control of Dynamically-Managed Code Resources
CVE-2026-44336 2026-05-9 00:53 2026-05-8 Show GitHub Exploit DB Packet Storm