Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
221001	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2454	2013-03-27 17:24	2011-11-10	Show	GitHub Exploit DB Packet Storm

221002	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2453	2013-03-27 17:22	2011-11-10	Show	GitHub Exploit DB Packet Storm

221003	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2452	2013-03-27 17:19	2011-11-10	Show	GitHub Exploit DB Packet Storm

221004	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2451	2013-03-27 17:18	2011-11-10	Show	GitHub Exploit DB Packet Storm

221005	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2450	2013-03-27 17:16	2011-11-10	Show	GitHub Exploit DB Packet Storm

221006	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2445	2013-03-27 17:14	2011-11-10	Show	GitHub Exploit DB Packet Storm

221007	4.3	警告	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2444	2013-03-27 17:13	2011-09-21	Show	GitHub Exploit DB Packet Storm

221008	9.3	危険	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2430	2013-03-27 17:12	2011-09-21	Show	GitHub Exploit DB Packet Storm

221009	5	警告	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2429	2013-03-27 17:10	2011-09-21	Show	GitHub Exploit DB Packet Storm

221010	9.3	危険	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2428	2013-03-27 17:07	2011-09-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
51	8.4	HIGH Local	praison	praisonai praisonaiagents	PraisonAI is a multi-agent teams system. Versions 4.5.138 and below are vulnerable to arbitrary code execution through automatic, unsanitized import of a tools.py file from the current working direct… Update	CWE-94 CWE-426 Code Injection Untrusted Search Path	CVE-2026-40287	2026-04-21 02:47	2026-04-14	Show	GitHub Exploit DB Packet Storm

52	9.8	CRITICAL Network	praison	praisonai praisonaiagents	PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the workflow engine is vulnerable to arbitrary command and code execution through untru… Update	CWE-78 CWE-94 OS Command Code Injection	CVE-2026-40288	2026-04-21 02:47	2026-04-14	Show	GitHub Exploit DB Packet Storm

53	9.1	CRITICAL Network	praison	praisonai praisonaiagents	PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.140 of praisonaiagents, the browser bridge (praisonai browser start) is vulnerable to unauthenticated remote se… Update	CWE-306 Missing Authentication for Critical Function	CVE-2026-40289	2026-04-21 02:46	2026-04-14	Show	GitHub Exploit DB Packet Storm

54	9.1	CRITICAL Network	praison	praisonai	PraisonAI is a multi-agent teams system. In versions 4.5.139 and below, the GitHub Actions workflows are vulnerable to ArtiPACKED attack, a known credential leakage vector caused by using actions/che… Update	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2026-40313	2026-04-21 02:39	2026-04-14	Show	GitHub Exploit DB Packet Storm

55	9.8	CRITICAL Network	praison	praisonai	PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier injection vulnerability in SQLiteConversationStore where the table_prefix configuration value is directly concate… Update	CWE-89 SQL Injection	CVE-2026-40315	2026-04-21 02:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

56	5.5	MEDIUM Network	maxkb	maxkb	MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an incomplete fix for CVE-2025-53928, where a Remote Code Execution vulnerability still exists in the MCP node of… Update	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2026-39417	2026-04-21 02:36	2026-04-14	Show	GitHub Exploit DB Packet Storm

57	7.4	HIGH Network	maxkb	maxkb	MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed by using socket.sendto() with the MSG_FASTOPEN flag. This allows authentic… Update	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-39418	2026-04-21 02:36	2026-04-14	Show	GitHub Exploit DB Packet Storm

58	7.4	HIGH Network	maxkb	maxkb	MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incomplete sandbox protection mechanism allows an authenticated user with tool execution privileges to escape the … Update	CWE-78 CWE-693 OS Command Protection Mechanism Failure	CVE-2026-39420	2026-04-21 02:35	2026-04-14	Show	GitHub Exploit DB Packet Storm

59	7.4	HIGH Network	maxkb	maxkb	MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in the ToolExecutor component. By leveraging Python's ctypes library to execute ra… Update	CWE-94 CWE-693 Code Injection Protection Mechanism Failure	CVE-2026-39421	2026-04-21 02:35	2026-04-14	Show	GitHub Exploit DB Packet Storm

60	5.4	MEDIUM Network	maxkb	maxkb	MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability through the application name or icon fields when creating an ap… Update	CWE-79 Cross-site Scripting	CVE-2026-39422	2026-04-21 02:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed