Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4331 7.3 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるジェネリックな例外のキャッチ宣言に関する脆弱性 CWE-396
ジェネリックな例外のキャッチ宣言 		CVE-2026-40149 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
4332 5.3 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-40151 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
4333 5.3 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40152 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
4334 6.5 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける環境変数に対する重要な情報の平文保存に関する脆弱性 CWE-526
環境変数に対する重要な情報の平文保存 		CVE-2026-40153 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
4335 7.8 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-426
CWE-829
CWE-94
CVE-2026-40156 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
4336 7.8 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-693
CWE-94
CVE-2026-40158 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
4337 5.5 警告
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-200
CWE-214
CVE-2026-40159 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
4338 6.5 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40160 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
4339 8.1 重要
Network 		b3log SiYuan B3logのSiYuanにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-40259 2026-04-21 10:44 2026-04-16 Show GitHub Exploit DB Packet Storm
4340 8.4 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAI等の複数製品における複数の脆弱性 CWE-426
CWE-94
CVE-2026-40287 2026-04-21 10:44 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349861 - ibm websphere_caching_proxy_server Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request. NVD-CWE-Other
CVE-2002-1167 2008-09-11 04:13 2002-11-4 Show GitHub Exploit DB Packet Storm
349862 - ibm websphere_caching_proxy_server Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that … NVD-CWE-Other
CVE-2002-1168 2008-09-11 04:13 2002-11-4 Show GitHub Exploit DB Packet Storm
349863 - sun cobalt_raq_2
cobalt_raq_3i
cobalt_raq_4 		MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, follo… NVD-CWE-Other
CVE-2002-0430 2008-09-11 04:12 2002-08-12 Show GitHub Exploit DB Packet Storm
349864 - trend_micro interscan_viruswall Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header s… NVD-CWE-Other
CVE-2002-0440 2008-09-11 04:12 2002-07-26 Show GitHub Exploit DB Packet Storm
349865 - talentsoft web\+_server Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe. NVD-CWE-Other
CVE-2002-0450 2008-09-11 04:12 2002-07-26 Show GitHub Exploit DB Packet Storm
349866 - novell web_search Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search parameter. NVD-CWE-Other
CVE-2002-0530 2008-09-11 04:12 2002-08-12 Show GitHub Exploit DB Packet Storm
349867 - kth
luke_mewburn 		kth_kerberos
lukemftp 		Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request. NVD-CWE-Other
CVE-2002-0600 2008-09-11 04:12 2002-06-18 Show GitHub Exploit DB Packet Storm
349868 - sgi irix Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges. NVD-CWE-Other
CVE-2002-0631 2008-09-11 04:12 2002-07-3 Show GitHub Exploit DB Packet Storm
349869 - sgi irix Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server. NVD-CWE-Other
CVE-2002-0632 2008-09-11 04:12 2002-09-5 Show GitHub Exploit DB Packet Storm
349870 - openssl
oracle
apple 		openssl
application_server
corporate_time_outlook_connector
http_server
mac_os_x 		OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and p… NVD-CWE-Other
CVE-2002-0655 2008-09-11 04:12 2002-08-12 Show GitHub Exploit DB Packet Storm