Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214201 4 警告 レッドハット - Red Hat CloudForms Management Engine の CatalogController における任意のカタログを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0078 2014-05-16 17:21 2014-05-12 Show GitHub Exploit DB Packet Storm
214202 2.1 注意 Katello Project - Katello Installer における秘密鍵を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4455 2014-05-16 17:16 2013-10-22 Show GitHub Exploit DB Packet Storm
214203 4.3 警告 Bharat Mediratta - Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2087 2014-05-16 17:15 2013-04-22 Show GitHub Exploit DB Packet Storm
214204 6.8 警告 CloudBees - CloudBees Jenkins におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2034 2014-05-16 16:52 2013-05-2 Show GitHub Exploit DB Packet Storm
214205 6.8 警告 OpenX - OpenX におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-7376 2014-05-16 16:43 2013-07-3 Show GitHub Exploit DB Packet Storm
214206 4.3 警告 OpenX - OpenX におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3514 2014-05-16 16:43 2013-06-28 Show GitHub Exploit DB Packet Storm
214207 6.8 警告 WP125 Plugin project - WordPress 用 WP125 プラグインの Add/Edit ページ におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2700 2014-05-16 16:42 2013-04-6 Show GitHub Exploit DB Packet Storm
214208 4.3 警告 smart-flv Plugin project - WordPress 用 smart-flv プラグインの jwplayer.swf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1765 2014-05-16 16:42 2013-02-25 Show GitHub Exploit DB Packet Storm
214209 9.7 危険 Broadcom - Broadcom Ltd PIPA C211 の Web インターフェースにおける認証情報などの重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2014-2046 2014-05-16 16:17 2014-05-9 Show GitHub Exploit DB Packet Storm
214210 7.5 危険 Google
Novell		 - Android SDK Platform-tools の Android 用 Android Debug Bridge における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2014-1909 2014-05-16 15:59 2014-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
121 8.1 HIGH
Adjacent 		powerdns dnsdist A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. D… New CWE-125
Out-of-bounds Read 		CVE-2026-33599 2026-04-25 03:52 2026-04-22 Show GitHub Exploit DB Packet Storm
122 9.1 CRITICAL
Network 		powerdns dnsdist A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache. New CWE-125
Out-of-bounds Read 		CVE-2026-33598 2026-04-25 03:51 2026-04-22 Show GitHub Exploit DB Packet Storm
123 7.5 HIGH
Network 		powerdns dnsdist PRSD detection denial of service New CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-33597 2026-04-25 03:51 2026-04-22 Show GitHub Exploit DB Packet Storm
124 6.5 MEDIUM
Adjacent 		powerdns dnsdist A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed to a TCP-only or DN… New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-33596 2026-04-25 03:50 2026-04-22 Show GitHub Exploit DB Packet Storm
125 7.5 HIGH
Network 		powerdns dnsdist A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the conne… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-33595 2026-04-25 03:49 2026-04-22 Show GitHub Exploit DB Packet Storm
126 7.5 HIGH
Network 		powerdns dnsdist A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query. New CWE-369
 Divide By Zero 		CVE-2026-33593 2026-04-25 03:49 2026-04-22 Show GitHub Exploit DB Packet Storm
127 6.5 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype… New CWE-915
CWE-1321
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42044 2026-04-25 03:16 2026-04-25 Show GitHub Exploit DB Packet Storm
128 7.2 HIGH
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 r… New CWE-183
CWE-441
CWE-918
 Permissive List of Allowed Inputs
Confused Deputy
Server-Side Request Forgery (SSRF)  		CVE-2026-42043 2026-04-25 03:16 2026-04-25 Show GitHub Exploit DB Packet Storm
129 5.4 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library's XSRF token protection logic uses JavaScript truthy/falsy semantics instead of strict … New CWE-183
CWE-201
 Permissive List of Allowed Inputs
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-42042 2026-04-25 03:16 2026-04-25 Show GitHub Exploit DB Packet Storm
130 4.8 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype… New CWE-287
CWE-1321
Improper Authentication
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42041 2026-04-25 03:16 2026-04-25 Show GitHub Exploit DB Packet Storm