Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
214641 3.5 注意 Fedora Project
Digium
- Asterisk Open Source の PJSIP チャネルドライバの res/res_pjsip_exten_state.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2289 2014-04-23 15:53 2014-03-10 Show GitHub Exploit DB Packet Storm
214642 4.3 警告 Fedora Project
Digium
- Asterisk Open Source の PJSIP チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2288 2014-04-23 15:52 2014-03-10 Show GitHub Exploit DB Packet Storm
214643 3.5 注意 Fedora Project
Digium
- Asterisk Open Source および Certified Asterisk の channels/chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2287 2014-04-23 15:52 2014-03-10 Show GitHub Exploit DB Packet Storm
214644 7.5 危険 Fedora Project
Digium
- Asterisk Open Source および Certified Asterisk の main/http.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2286 2014-04-23 15:52 2014-03-10 Show GitHub Exploit DB Packet Storm
214645 3.5 注意 エフ・セキュア - F-Secure Messaging Secure Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2844 2014-04-22 19:44 2014-04-16 Show GitHub Exploit DB Packet Storm
214646 7.5 危険 エフ・セキュア - 複数の F-Secure 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-7369 2014-04-22 19:40 2013-04-24 Show GitHub Exploit DB Packet Storm
214647 2.1 注意 エフ・セキュア - Mac OS X 用の複数の F-Secure 製品におけるファイアーウォールを無効にされる脆弱性 CWE-noinfo
情報不足
CVE-2012-6646 2014-04-22 19:18 2012-12-12 Show GitHub Exploit DB Packet Storm
214648 6.3 警告 Novell
Lennart Poettering
- systemd の session_link_x11_socket 関数における任意のファイルを作成される脆弱性 CWE-59
リンク解釈の問題
CVE-2012-0871 2014-04-22 18:57 2012-02-29 Show GitHub Exploit DB Packet Storm
214649 4.3 警告 デル - Dell SonicWALL Email Security におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2879 2014-04-22 18:42 2014-03-26 Show GitHub Exploit DB Packet Storm
214650 5 警告 オラクル - Oracle Sun Solaris の Lighthttpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-2469 2014-04-22 16:19 2014-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 7.3 HIGH
Network
- - A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unknown function of the file index.js. This manipulation of the argument __proto__ causes improperly cont… CWE-94
CWE-1321
Code Injection
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-6621 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
192 6.3 MEDIUM
Network
- - A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. The manipulation of t… CWE-22
Path Traversal
CVE-2026-6620 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
193 3.5 LOW
Network
- - A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/app/components/base/image-uploader/image-preview.tsx of the component ImagePrevie… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-6619 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
194 6.3 MEDIUM
Network
- - A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_bundle of the file api/core/tools/utils/parser.py of the component ApiBasedTool… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-6618 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
195 8.8 HIGH
Network
- - ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenticated remote attackers with shell access can inject OS commands and execute them with root privilege… CWE-78
OS Command 
CVE-2026-5967 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
196 7.8 HIGH
Local
- - SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or plac… CWE-276
Incorrect Default Permissions 
CVE-2026-39454 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
197 6.3 MEDIUM
Network
- - A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function get_api_tool_provider_remote_schema of the file api/services/tools/api_tools_manage_service.py of … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-6617 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm
198 6.3 MEDIUM
Network
- - A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extract_with_bs4/extract_with_3k/extract_with_lxml of the file superagi/helper/webpag… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-6616 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm
199 7.3 HIGH
Network
- - A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function Upload of the file superagi/controllers/resources.py of the component Multipart Uplo… CWE-22
Path Traversal
CVE-2026-6615 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm
200 8.1 HIGH
Network
- - ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on th… CWE-23
 Relative Path Traversal
CVE-2026-5966 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm