Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2021 8.8 重要
Network 		フォーティネット FortiDDoS-F フォーティネットのFortiDDoS-FにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-39815 2026-04-21 10:45 2026-04-14 Show GitHub Exploit DB Packet Storm
2022 4.3 警告
Network 		saleor saleor saleorにおけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい 		CVE-2026-39851 2026-04-21 10:45 2026-04-8 Show GitHub Exploit DB Packet Storm
2023 5.3 警告
Network 		Apostrophe Technologies ApostropheCMS Apostrophe TechnologiesのApostropheCMSにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-39857 2026-04-21 10:45 2026-04-15 Show GitHub Exploit DB Packet Storm
2024 7.3 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるジェネリックな例外のキャッチ宣言に関する脆弱性 CWE-396
ジェネリックな例外のキャッチ宣言 		CVE-2026-40149 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
2025 5.3 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-40151 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
2026 5.3 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40152 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
2027 6.5 警告
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける環境変数に対する重要な情報の平文保存に関する脆弱性 CWE-526
環境変数に対する重要な情報の平文保存 		CVE-2026-40153 2026-04-21 10:45 2026-04-9 Show GitHub Exploit DB Packet Storm
2028 7.8 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-426
CWE-829
CWE-94
CVE-2026-40156 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
2029 7.8 重要
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-693
CWE-94
CVE-2026-40158 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
2030 5.5 警告
Local 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける複数の脆弱性 CWE-200
CWE-214
CVE-2026-40159 2026-04-21 10:44 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314611 5.8 MEDIUM
Network 		chillcreations com_ccnewsletter Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in … CWE-22
Path Traversal 		CVE-2010-0467 2024-01-27 02:44 2010-02-3 Show GitHub Exploit DB Packet Storm
314612 9.8 CRITICAL
Network 		debian
canonical 		lintian
debian_linux
ubuntu_linux 		Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive i… CWE-22
Path Traversal 		CVE-2009-4013 2024-01-27 02:44 2010-02-3 Show GitHub Exploit DB Packet Storm
314613 7.5 HIGH
Network 		ibm websphere_application_server IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. CWE-178
 Improper Handling of Case Sensitivity 		CVE-2000-0497 2024-01-27 02:43 2000-06-8 Show GitHub Exploit DB Packet Storm
314614 7.5 HIGH
Network 		unify ewave_servletexec Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. CWE-178
 Improper Handling of Case Sensitivity 		CVE-2000-0498 2024-01-27 02:43 2000-06-8 Show GitHub Exploit DB Packet Storm
314615 7.5 HIGH
Network 		bea weblogic_server The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. CWE-178
 Improper Handling of Case Sensitivity 		CVE-2000-0499 2024-01-27 02:43 2000-06-8 Show GitHub Exploit DB Packet Storm
314616 7.1 HIGH
Local 		iss blackice_server_protection
blackice_pc_protection 		BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2004-1714 2024-01-27 02:21 2004-08-11 Show GitHub Exploit DB Packet Storm
314617 7.0 HIGH
Local 		symantec antivirus_scan_engine The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUp… CWE-59
Link Following 		CVE-2004-0217 2024-01-27 02:21 2004-04-15 Show GitHub Exploit DB Packet Storm
314618 5.5 MEDIUM
Local 		mgetty_project mgetty faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files. CWE-59
Link Following 		CVE-2003-0517 2024-01-27 02:20 2003-08-18 Show GitHub Exploit DB Packet Storm
314619 7.8 HIGH
Local 		ibm u2_universe cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files. CWE-59
Link Following 		CVE-2003-0578 2024-01-27 02:19 2003-08-18 Show GitHub Exploit DB Packet Storm
314620 7.8 HIGH
Local 		oracle mysql Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini ini… CWE-120
Classic Buffer Overflow 		CVE-2002-0969 2024-01-27 02:19 2002-10-11 Show GitHub Exploit DB Packet Storm