Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3231 8.8 重要
Network
フォーティネット FortiDDoS-F フォーティネットのFortiDDoS-FにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-39815 2026-04-21 10:45 2026-04-14 Show GitHub Exploit DB Packet Storm
3232 4.3 警告
Network
saleor saleor saleorにおけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい
CVE-2026-39851 2026-04-21 10:45 2026-04-8 Show GitHub Exploit DB Packet Storm
3233 5.3 警告
Network
Apostrophe Technologies ApostropheCMS Apostrophe TechnologiesのApostropheCMSにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-39857 2026-04-21 10:45 2026-04-15 Show GitHub Exploit DB Packet Storm
3234 7.3 重要
Local
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるジェネリックな例外のキャッチ宣言に関する脆弱性 CWE-396
ジェネリックな例外のキャッチ宣言
CVE-2026-40149 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
3235 5.3 警告
Network
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-40151 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
3236 5.3 警告
Network
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40152 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
3237 6.5 警告
Network
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける環境変数に対する重要な情報の平文保存に関する脆弱性 CWE-526
環境変数に対する重要な情報の平文保存
CVE-2026-40153 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
3238 7.8 重要
Local
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-426
CWE-829
CWE-94
CVE-2026-40156 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
3239 7.8 重要
Local
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-693
CWE-94
CVE-2026-40158 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
3240 5.5 警告
Local
Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-200
CWE-214
CVE-2026-40159 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347631 - hp radia_client Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to exe… NVD-CWE-Other
CVE-2005-1825 2011-03-8 11:22 2005-05-3 Show GitHub Exploit DB Packet Storm
347632 - hp radia_client Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a long file extension. NVD-CWE-Other
CVE-2005-1826 2011-03-8 11:22 2005-05-3 Show GitHub Exploit DB Packet Storm
347633 - kerio kerio_mailserver
personal_firewall
winroute_firewall
The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 … NVD-CWE-Other
CVE-2005-1062 2011-03-8 11:21 2005-05-2 Show GitHub Exploit DB Packet Storm
347634 - apple applescript
mac_os_x
mac_os_x_server
The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could… NVD-CWE-Other
CVE-2005-1331 2011-03-8 11:21 2005-05-4 Show GitHub Exploit DB Packet Storm
347635 - apple terminal
mac_os_x
mac_os_x_server
Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences. NVD-CWE-Other
CVE-2005-1341 2011-03-8 11:21 2005-05-4 Show GitHub Exploit DB Packet Storm
347636 - apple terminal
mac_os_x
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands. NVD-CWE-Other
CVE-2005-1342 2011-03-8 11:21 2005-05-4 Show GitHub Exploit DB Packet Storm
347637 - phpmyadmin phpmyadmin The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script. NVD-CWE-Other
CVE-2005-1392 2011-03-8 11:21 2005-05-3 Show GitHub Exploit DB Packet Storm
347638 - freebsd freebsd The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications t… NVD-CWE-Other
CVE-2005-1406 2011-03-8 11:21 2005-05-6 Show GitHub Exploit DB Packet Storm
347639 - soft3304 04webserver Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder. NVD-CWE-Other
CVE-2005-1416 2011-03-8 11:21 2005-05-3 Show GitHub Exploit DB Packet Storm
347640 - stefan_ritt elog_web_logbook ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL. NVD-CWE-Other
CVE-2005-0440 2011-03-8 11:20 2005-05-2 Show GitHub Exploit DB Packet Storm