Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228811 5.8 警告 PrestaShop
Presto-Changeo		 - PrestaShop の Canada Post モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5799 2012-11-7 16:31 2012-11-4 Show GitHub Exploit DB Packet Storm
228812 5.8 警告 osCommerce - osCommerce の PayPal Pro PayFlow EC モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5798 2012-11-7 16:31 2012-11-4 Show GitHub Exploit DB Packet Storm
228813 5.8 警告 jasonabc
osCommerce		 - osCommerce の PayPal Payflow Pro モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5797 2012-11-7 16:30 2012-11-4 Show GitHub Exploit DB Packet Storm
228814 5.8 警告 osCommerce
PayPal		 - osCommerce の PayPal Pro モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5796 2012-11-7 16:29 2012-11-4 Show GitHub Exploit DB Packet Storm
228815 5.8 警告 osCommerce
akunamachata		 - osCommerce の PayPal Express モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5795 2012-11-7 16:28 2012-11-4 Show GitHub Exploit DB Packet Storm
228816 5.8 警告 osCommerce
Moneybookers		 - osCommerce の MoneyBookers モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5794 2012-11-7 16:28 2012-11-4 Show GitHub Exploit DB Packet Storm
228817 5.8 警告 osCommerce
Harald Ponce de Leon		 - osCommerce の Authorize.Net モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5793 2012-11-7 16:26 2012-11-4 Show GitHub Exploit DB Packet Storm
228818 5.8 警告 Sage Pay Europe Limited
osCommerce		 - osCommerce の Sage Pay Direct モジュールにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5792 2012-11-7 16:15 2012-11-4 Show GitHub Exploit DB Packet Storm
228819 5.8 警告 PayPal - PayPal Invoicing における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5791 2012-11-7 14:45 2012-11-4 Show GitHub Exploit DB Packet Storm
228820 5.8 警告 PayPal - PayPal Payments Standard PHP ライブラリにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5790 2012-11-7 14:45 2012-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 7.3 HIGH
Network 		- - A vulnerability was determined in 1024bit extend-deep up to 0.1.6. The impacted element is an unknown function of the file index.js. This manipulation of the argument __proto__ causes improperly cont… New CWE-94
CWE-1321
Code Injection
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-6621 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
192 6.3 MEDIUM
Network 		- - A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. The manipulation of t… New CWE-22
Path Traversal 		CVE-2026-6620 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
193 3.5 LOW
Network 		- - A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/app/components/base/image-uploader/image-preview.tsx of the component ImagePrevie… New CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-6619 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
194 6.3 MEDIUM
Network 		- - A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_bundle of the file api/core/tools/utils/parser.py of the component ApiBasedTool… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-6618 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
195 8.8 HIGH
Network 		- - ThreatSonar Anti-Ransomware developed by TeamT5 has an Privilege Escalation vulnerability. Authenticated remote attackers with shell access can inject OS commands and execute them with root privilege… New CWE-78
OS Command  		CVE-2026-5967 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
196 7.8 HIGH
Local 		- - SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or plac… New CWE-276
Incorrect Default Permissions  		CVE-2026-39454 2026-04-20 18:16 2026-04-20 Show GitHub Exploit DB Packet Storm
197 6.3 MEDIUM
Network 		- - A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function get_api_tool_provider_remote_schema of the file api/services/tools/api_tools_manage_service.py of … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-6617 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm
198 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extract_with_bs4/extract_with_3k/extract_with_lxml of the file superagi/helper/webpag… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-6616 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm
199 7.3 HIGH
Network 		- - A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function Upload of the file superagi/controllers/resources.py of the component Multipart Uplo… New CWE-22
Path Traversal 		CVE-2026-6615 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm
200 8.1 HIGH
Network 		- - ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability. Authenticated remote attackers with web access can exploit Path Traversal to delete arbitrary files on th… New CWE-23
 Relative Path Traversal 		CVE-2026-5966 2026-04-20 17:16 2026-04-20 Show GitHub Exploit DB Packet Storm