Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228651 7.5 危険 red mexico - Xoops 用の rmgallery モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1806 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
228652 7.8 危険 PulseAudio - PulseAudio におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1804 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
228653 7.5 危険 sblog - sBLOG の inc/lang.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1801 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
228654 4.9 警告 シマンテック - Symantec Norton Personal Firewall の SPBBCDrv.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1793 2012-12-20 18:19 2007-04-2 Show GitHub Exploit DB Packet Storm
228655 7.8 危険 シマンテック - SMTP 用の Symantec Mail Security および Mail Security Appliance におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1792 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228656 9.3 危険 softerra - Softerra Time-Assistant の lib/timesheet.class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1787 2012-12-20 18:19 2007-03-31 Show GitHub Exploit DB Packet Storm
228657 4.3 警告 unverse.net - aBitWhizzy におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1774 2012-12-20 18:19 2007-03-29 Show GitHub Exploit DB Packet Storm
228658 2.6 注意 unverse.net - aBitWhizzy におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-1773 2012-12-20 18:19 2007-03-29 Show GitHub Exploit DB Packet Storm
228659 6.3 警告 VMware - VMware Workstation の Shared Folders 機能におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1744 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
228660 6.9 警告 TrueCrypt Foundation - TrueCrypt におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1738 2012-12-20 18:19 2007-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 - - - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as reque… CWE-674
 Uncontrolled Recursion 		CVE-2026-42039 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1292 3.7 LOW
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapping (charMap) at li… CWE-116
CWE-626
 Improper Encoding or Escaping of Output
 Null Byte Interaction Error (Poison Null Byte) 		CVE-2026-42040 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1293 7.4 HIGH
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attac… CWE-113
CWE-1321
HTTP Response Splitting
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42035 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1294 5.3 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.type directly into th… CWE-93
CRLF Injection 		CVE-2026-42037 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1295 4.8 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype… CWE-287
CWE-1321
Improper Authentication
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42041 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1296 5.4 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the Axios library's XSRF token protection logic uses JavaScript truthy/falsy semantics instead of strict … CWE-183
CWE-201
 Permissive List of Allowed Inputs
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-42042 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1297 7.2 HIGH
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 r… CWE-183
CWE-441
CWE-918
 Permissive List of Allowed Inputs
Confused Deputy
Server-Side Request Forgery (SSRF)  		CVE-2026-42043 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1298 6.5 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype… CWE-915
CWE-1321
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42044 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1299 - - - Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFil… CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-41326 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
1300 7.4 HIGH
Network 		- - Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml checks out attacker-controlled fork code and executes it via cargo run, with … CWE-94
Code Injection 		CVE-2026-41414 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm