Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223221 7.5 危険 projektseminar proservice wwu - TYPO3 用の Virtual civserv エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2106 2012-12-20 19:10 2009-06-17 Show GitHub Exploit DB Packet Storm
223222 4.3 警告 udo von eynern - TYPO3 用の Modern Guestbook / Commenting System エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2104 2012-12-20 19:10 2009-06-17 Show GitHub Exploit DB Packet Storm
223223 7.5 危険 steve grundell - TYPO3 用の fe_mp3player エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2103 2012-12-20 19:10 2009-06-17 Show GitHub Exploit DB Packet Storm
223224 7.5 危険 zokisoft - Zoki Soft Zoki Catalog の system/application/controllers/catalog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2097 2012-12-20 19:10 2009-06-17 Show GitHub Exploit DB Packet Storm
223225 4.3 警告 phpwebthings - phpWebThings の help.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-2081 2012-12-20 19:10 2009-06-16 Show GitHub Exploit DB Packet Storm
223226 6 警告 ricardo alexandre de oliveira staudt - Yogurt の writemessage.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-2034 2012-12-20 19:10 2009-06-12 Show GitHub Exploit DB Packet Storm
223227 4.3 警告 ricardo alexandre de oliveira staudt - Yogurt の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2033 2012-12-20 19:10 2009-06-12 Show GitHub Exploit DB Packet Storm
223228 2.1 注意 サン・マイクロシステムズ - Sun OpenSolaris の smbfs における CIFS ボリューム上で任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2009-2031 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
223229 10 危険 サン・マイクロシステムズ
IBM
- IBM OS/400 i5/OS V5R4M0 および V6R1M0 の JDK における脆弱性 CWE-noinfo
情報不足
CVE-2009-2030 2012-12-20 19:10 2009-06-11 Show GitHub Exploit DB Packet Storm
223230 5 警告 vt.rovno - Vlad Titarenko ASP VT Auth におけるユーザ名などを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-2024 2012-12-20 19:10 2009-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2111 7.4 HIGH
Network
- - PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the execute_command function in shell_tools.py calls os.path.expandvars() on every command argument at line 64, manually re-implementi… CWE-526
 Cleartext Storage of Sensitive Information in an Environment Variable
CVE-2026-40153 2026-04-14 01:16 2026-04-10 Show GitHub Exploit DB Packet Storm
2112 7.9 HIGH
Local
- - PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no auth_token is co… CWE-396
CVE-2026-40149 2026-04-14 01:16 2026-04-10 Show GitHub Exploit DB Packet Storm
2113 - - - PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he memory hooks executor in praisonaiagents passes a user-controlled command string directly to subprocess.run() with shell=True at sr… CWE-78
OS Command 
CVE-2026-40111 2026-04-14 01:16 2026-04-10 Show GitHub Exploit DB Packet Storm
2114 8.1 HIGH
Network
- - BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wallet::WalletClient#acquire_certificate persists certificate records to storage without verifying the certifier'… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-40070 2026-04-14 01:16 2026-04-10 Show GitHub Exploit DB Packet Storm
2115 5.3 MEDIUM
Network
- - Insertion of Sensitive Information Into Sent Data vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a throu… CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-39586 2026-04-14 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
2116 5.3 MEDIUM
Network
- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themefic Instantio instantio allows Retrieve Embedded Sensitive Data.This issue affects Instantio: from n/a… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-39571 2026-04-14 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
2117 5.3 MEDIUM
Network
- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-39536 2026-04-14 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
2118 4.9 MEDIUM
Network
- - Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through <= 4.3.1. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-39521 2026-04-14 01:16 2026-04-8 Show GitHub Exploit DB Packet Storm
2119 4.1 MEDIUM
Network
- - Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CalDAV output generator builds iCalendar VTODO entries via raw string concatenation without applying RFC 5545 TEXT … CWE-93
CRLF Injection
CVE-2026-35601 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm
2120 5.9 MEDIUM
Network
- - Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the TOTP failed-attempt lockout mechanism is non-functional due to a database transaction handling bug. When a TOTP val… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-35597 2026-04-14 01:16 2026-04-11 Show GitHub Exploit DB Packet Storm