Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221231 6.8 警告 The GIMP Team - GIMP の KiSS CEL ファイルフォーマットプラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-3403 2013-03-8 13:45 2012-08-25 Show GitHub Exploit DB Packet Storm
221232 4.3 警告 シスコシステムズ - Cisco Security Monitoring, Analysis and Response System における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1140 2013-03-7 19:17 2013-03-4 Show GitHub Exploit DB Packet Storm
221233 3.5 注意 IBM - IBM TADDM の Data Management Portal Web User Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5942 2013-03-7 19:16 2013-03-1 Show GitHub Exploit DB Packet Storm
221234 3.5 注意 IBM - IBM TADDM の Data Management Portal Web User Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5939 2013-03-7 19:13 2013-03-1 Show GitHub Exploit DB Packet Storm
221235 5.8 警告 IBM - IBM TADDM の SSL 設定におけるサーバを偽装される脆弱性 CWE-16
環境設定 		CVE-2012-5770 2013-03-7 19:12 2013-03-1 Show GitHub Exploit DB Packet Storm
221236 4.3 警告 IBM - IBM WebSphere Commerce におけるサービス運用妨害 (ログイン停止) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-4855 2013-03-7 19:09 2012-10-25 Show GitHub Exploit DB Packet Storm
221237 5 警告 thekelleys - Dnsmasq におけるサービス運用妨害 (トラフィック増幅) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3411 2013-03-7 19:00 2013-03-5 Show GitHub Exploit DB Packet Storm
221238 6.9 警告 GNU Project - GNU Project Debugger における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4355 2013-03-7 18:58 2013-03-5 Show GitHub Exploit DB Packet Storm
221239 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の DirectShow における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-0077 2013-03-7 17:55 2013-02-12 Show GitHub Exploit DB Packet Storm
221240 7.8 危険 マイクロソフト - 複数の Microsoft Windows 製品の TCP/IP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-0075 2013-03-7 17:53 2013-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 5.4 MEDIUM
Network 		maxkb maxkb MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain an Eval Injection vulnerability in the Markdown rendering engine that allows any user capable of interacting with… Update CWE-79
CWE-95
Cross-site Scripting
Eval Injection 		CVE-2026-39423 2026-04-21 02:34 2026-04-14 Show GitHub Exploit DB Packet Storm
62 4.7 MEDIUM
Network 		maxkb maxkb MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, the chat export feature is vulnerable to Improper Neutralization of Formula Elements in a CSV File. When an administr… Update CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2026-39424 2026-04-21 02:34 2026-04-14 Show GitHub Exploit DB Packet Storm
63 3.1 LOW
Network 		maxkb maxkb MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an authenticated user can bypass sandbox result validation and spoof tool execution results by exploiting Python fram… Update CWE-74
CWE-290
CWE-693
Injection
 Authentication Bypass by Spoofing
 Protection Mechanism Failure 		CVE-2026-39419 2026-04-21 02:32 2026-04-14 Show GitHub Exploit DB Packet Storm
64 5.4 MEDIUM
Network 		maxkb maxkb MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability that allows authenticated users to inject arbitrary HTML and Ja… Update CWE-80
Basic XSS 		CVE-2026-39425 2026-04-21 02:31 2026-04-14 Show GitHub Exploit DB Packet Storm
65 5.4 MEDIUM
Network 		maxkb maxkb MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a Stored Cross-Site Scripting (XSS) vulnerability where the frontend's MdRenderer.vue component parses custom <if… Update CWE-79
Cross-site Scripting 		CVE-2026-39426 2026-04-21 02:31 2026-04-14 Show GitHub Exploit DB Packet Storm
66 7.3 HIGH
Network 		- - A vulnerability was found in ericc-ch copilot-api up to 0.7.0. The impacted element is the function cors of the file src/server.ts of the component Token Endpoint. Performing a manipulation results i… New CWE-346
CWE-942
 Origin Validation Error
 Permissive Cross-domain Policy with Untrusted Domains 		CVE-2026-6662 2026-04-21 02:16 2026-04-21 Show GitHub Exploit DB Packet Storm
67 - - - miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPActio… Update CWE-125
CWE-191
Out-of-bounds Read
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-5720 2026-04-21 02:16 2026-04-18 Show GitHub Exploit DB Packet Storm
68 8.8 HIGH
Network 		- - KissFFT before commit 8a8e66e contains an integer overflow vulnerability in the kiss_fftndr_alloc() function in kiss_fftndr.c where the allocation size calculation dimOther*(dimReal+2)*sizeof(kiss_ff… New CWE-122
CWE-190
Heap-based Buffer Overflow
 Integer Overflow or Wraparound 		CVE-2026-41445 2026-04-21 02:16 2026-04-21 Show GitHub Exploit DB Packet Storm
69 5.4 MEDIUM
Network 		- - The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login / login-callback flow, and did not use PKCE. An at… Update CWE-352
 Origin Validation Error 		CVE-2026-40948 2026-04-21 02:16 2026-04-18 Show GitHub Exploit DB Packet Storm
70 6.5 MEDIUM
Network 		- - OpenProject is open-source, web-based project management software. Prior to version 17.3.0, a user with `manage_agendas` permission in any project can inject agenda items into meetings belonging to a… New CWE-367
CWE-639
 Time-of-check Time-of-use (TOCTOU) Race Condition
 Authorization Bypass Through User-Controlled Key 		CVE-2026-40896 2026-04-21 02:16 2026-04-21 Show GitHub Exploit DB Packet Storm