Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241071 4.3 警告 brian carrier - Brian Carrier TSK の icat における特定の NTFS ファイルの検査を阻止される脆弱性 - CVE-2007-4197 2012-06-26 15:54 2007-08-7 Show GitHub Exploit DB Packet Storm
241072 4.3 警告 brian carrier - Brian Carrier TSK の icat における特定の NTFS ファイルの検査を阻止される脆弱性 - CVE-2007-4196 2012-06-26 15:54 2007-08-7 Show GitHub Exploit DB Packet Storm
241073 4.3 警告 amg soft - WebDirector の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-4178 2012-06-26 15:54 2007-08-7 Show GitHub Exploit DB Packet Storm
241074 6.8 警告 eqdkp - EQDKP Plus における詳細不明な脆弱性 - CVE-2007-4176 2012-06-26 15:54 2007-08-7 Show GitHub Exploit DB Packet Storm
241075 7.5 危険 AuraCMS - auraCMS の Forum Module の komentar.php における SQL インジェクションの脆弱性 - CVE-2007-4171 2012-06-26 15:54 2007-08-7 Show GitHub Exploit DB Packet Storm
241076 10 危険 al-athkar - AL-Athkar における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4170 2012-06-26 15:54 2007-08-7 Show GitHub Exploit DB Packet Storm
241077 7.5 危険 al-caricatier - AL-Caricatier の cat_viewed.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-4167 2012-06-26 15:54 2007-08-7 Show GitHub Exploit DB Packet Storm
241078 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC VMware の vielib.dll の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性 - CVE-2007-4155 2012-06-26 15:54 2007-08-3 Show GitHub Exploit DB Packet Storm
241079 4.3 警告 bluesky - v2.ocx の BlueSkychat ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-4145 2012-06-26 15:54 2007-08-3 Show GitHub Exploit DB Packet Storm
241080 7.5 危険 firestorm technologies - Joomla! の gmaps コンポーネントにおける SQL インジェクションの脆弱性 - CVE-2007-4128 2012-06-26 15:54 2007-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 3.3 LOW
Local 		- - MuPDF mutool does not sanitize PDF metadata fields before writing them to terminal output, allowing attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata. Attackers can emb… New CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences 		CVE-2026-40505 2026-04-16 11:16 2026-04-16 Show GitHub Exploit DB Packet Storm
182 9.8 CRITICAL
Network 		- - Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string li… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-40504 2026-04-16 11:16 2026-04-16 Show GitHub Exploit DB Packet Storm
183 6.4 MEDIUM
Network 		- - The WP YouTube Lyte plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lyte' shortcode in all versions up to, and including, 1.7.29 due to insufficient input sanitiza… New CWE-79
Cross-site Scripting 		CVE-2026-3299 2026-04-16 11:16 2026-04-16 Show GitHub Exploit DB Packet Storm
184 8.1 HIGH
Local 		- - Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trusted_mods or secure.http_mods, then a crafted mod can intercept the re… New CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2026-40960 2026-04-16 10:16 2026-04-16 Show GitHub Exploit DB Packet Storm
185 9.3 CRITICAL
Local 		- - Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod. New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-40959 2026-04-16 10:16 2026-04-16 Show GitHub Exploit DB Packet Storm
186 6.5 MEDIUM
Network 		- - OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path traversal sequences to the /mem… New CWE-22
Path Traversal 		CVE-2026-40503 2026-04-16 10:16 2026-04-16 Show GitHub Exploit DB Packet Storm
187 8.8 HIGH
Network 		- - OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative commands by exploiting insufficient… New CWE-862
 Missing Authorization 		CVE-2026-40502 2026-04-16 10:16 2026-04-16 Show GitHub Exploit DB Packet Storm
188 - - - radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embedding a newline byte in… New CWE-78
OS Command  		CVE-2026-40499 2026-04-16 10:16 2026-04-15 Show GitHub Exploit DB Packet Storm
189 6.3 MEDIUM
Network 		geosolutionsgroup geonode GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attack… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-39922 2026-04-16 10:16 2026-04-11 Show GitHub Exploit DB Packet Storm
190 6.3 MEDIUM
Network 		geosolutionsgroup geonode GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outbou… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-39921 2026-04-16 10:16 2026-04-11 Show GitHub Exploit DB Packet Storm