Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216291 9.3 危険 Csound - Csound の util/lpci_main.c 内の main 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-2107 2014-02-6 14:38 2012-04-4 Show GitHub Exploit DB Packet Storm
216292 9.3 危険 Csound - Csound の util/pv_import.c 内の pv_import 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-2106 2014-02-6 14:37 2012-04-4 Show GitHub Exploit DB Packet Storm
216293 6.8 警告 OTRS プロジェクト - Open Ticket Request System の Kernel/Modules/ 内の複数の .pm ファイルにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-1694 2014-02-6 14:08 2014-01-28 Show GitHub Exploit DB Packet Storm
216294 7.5 危険 OTRS プロジェクト - Open Ticket Request System の Kernel/System/State.pm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1471 2014-02-6 14:04 2014-01-28 Show GitHub Exploit DB Packet Storm
216295 1.9 注意 dest-unreach.org - socat におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0019 2014-02-6 12:21 2014-01-28 Show GitHub Exploit DB Packet Storm
216296 8.5 危険 TRENDnet - TRENDnet TEW-812DRU ルータにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-3365 2014-02-6 12:20 2013-07-26 Show GitHub Exploit DB Packet Storm
216297 6.8 警告 TRENDnet - TRENDnet TEW-812DRU ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3098 2014-02-6 12:18 2013-07-26 Show GitHub Exploit DB Packet Storm
216298 4.3 警告 Media5 - Media5 Mediatrix 4402 VoIP Gateway ファームウェアの Web Management Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1612 2014-02-5 18:06 2014-01-23 Show GitHub Exploit DB Packet Storm
216299 8.3 危険 Seowon Intech - Seowon Intech WiMAX SWC-9100 ルータの cgi-bin/diagnostic.cgi の ping 機能における任意のコマンドを実行される脆弱性 CWE-20
CWE-Other
CVE-2013-7179 2014-02-5 17:57 2013-12-19 Show GitHub Exploit DB Packet Storm
216300 10 危険 GateHouse
Harris
Thuraya Telecommunications
Hughes Network Systems
日本無線株式会社
Inmarsat plc.
- 複数の衛星通信端末のファームウェアにおける任意のコードを実行される脆弱性 CWE-287
CWE-Other
CVE-2013-6035 2014-02-5 17:50 2013-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 6.5 MEDIUM
Network
juniper junos_os_evolved A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privilege… Update CWE-686
 Function Call With Incorrect Argument Type
CVE-2026-33783 2026-04-18 03:27 2026-04-10 Show GitHub Exploit DB Packet Storm
12 7.5 HIGH
Network
praison praisonaiagents PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbitrary files from the filesystem by accepting an unrestricted skill_path paramet… Update CWE-862
 Missing Authorization
CVE-2026-40117 2026-04-18 03:23 2026-04-10 Show GitHub Exploit DB Packet Storm
13 7.0 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Update CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2026-33104 2026-04-18 03:20 2026-04-15 Show GitHub Exploit DB Packet Storm
14 8.1 HIGH
Network
- - The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.6. This is due to insufficient file type … New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-5718 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
15 7.5 HIGH
Network
- - The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and including 1.3.9.6. This is due to t… New CWE-22
Path Traversal
CVE-2026-5710 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
16 - - - Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the ConformityCheck class rendered the rule parameter through Jinja2's default Template() constructor, silentl… New CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-40320 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
17 - - - Giskard is an open-source testing framework for AI models. In versions prior to 1.0.2b1, the RegexMatching check passes a user-supplied regular expression pattern directly to Python's re.search() wit… New CWE-1333
 Inefficient Regular Expression Complexity
CVE-2026-40319 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
18 7.3 HIGH
Local
- - Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handlin… New CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-21733 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
19 7.9 HIGH
Local
- - Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher se… New CWE-200
Information Exposure
CVE-2025-65104 2026-04-18 03:16 2026-04-18 Show GitHub Exploit DB Packet Storm
20 4.3 MEDIUM
Network
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network. Update CWE-200
Information Exposure
CVE-2026-33829 2026-04-18 03:15 2026-04-15 Show GitHub Exploit DB Packet Storm