Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251161 1.9 注意 サイバートラスト株式会社
Postfix Project
レッドハット		 - Postfix における e-mail メッセージが漏えいする脆弱性 CWE-200
情報漏えい 		CVE-2008-2937 2011-04-26 08:48 2008-08-18 Show GitHub Exploit DB Packet Storm
251162 4.3 警告 アップル - Apple Mac OS X の Install Helper におけるユーザのログイン情報を追跡される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0190 2011-04-25 11:31 2011-03-23 Show GitHub Exploit DB Packet Storm
251163 5 警告 アップル - Apple Mac OS X のデフォルト設定されたターミナルにおける SSH サーバになりすまされる脆弱性 CWE-16
環境設定 		CVE-2011-0189 2011-04-25 11:27 2011-03-23 Show GitHub Exploit DB Packet Storm
251164 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0184 2011-04-25 11:21 2011-03-23 Show GitHub Exploit DB Packet Storm
251165 5 警告 アップル - Apple Mac OS X の Libinfo における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2011-0183 2011-04-25 10:32 2011-03-23 Show GitHub Exploit DB Packet Storm
251166 6.8 警告 アップル - Apple Mac OS X の ImageIO における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0181 2011-04-25 10:30 2011-03-23 Show GitHub Exploit DB Packet Storm
251167 7.2 危険 アップル - Apple Mac OS X の i386_set_ldt システムコールにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0182 2011-04-25 10:28 2011-03-23 Show GitHub Exploit DB Packet Storm
251168 2.1 注意 アップル - Apple Mac OS X の HFS における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0180 2011-04-25 10:27 2011-03-23 Show GitHub Exploit DB Packet Storm
251169 6.8 警告 アップル - Apple Mac OS X の CoreText における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0179 2011-04-25 10:26 2011-03-23 Show GitHub Exploit DB Packet Storm
251170 2.1 注意 アップル - Apple Mac OS X の CarbonCore における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-0178 2011-04-25 10:25 2011-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 7.5 HIGH
Network 		getkirby kirby Kirby is an open-source content management system. Kirby's `Xml::value()` method has special handling for `<![CDATA[ ]]>` blocks. If the input value is already valid `CDATA`, it is not escaped a seco… Update CWE-91
Blind XPath Injection 		CVE-2026-32870 2026-04-28 04:21 2026-04-24 Show GitHub Exploit DB Packet Storm
982 8.1 HIGH
Network 		getkirby kirby Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, Kirby's user permissions control which user role is allowed to perform specific actions to content models in the … Update CWE-1336
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-34587 2026-04-28 04:15 2026-04-24 Show GitHub Exploit DB Packet Storm
983 6.5 MEDIUM
Network 		getkirby kirby Kirby is an open-source content management system. Kirby's user permissions control which user role is allowed to perform specific actions to content models in the CMS. These permissions are defined … Update CWE-863
 Incorrect Authorization 		CVE-2026-40099 2026-04-28 04:12 2026-04-24 Show GitHub Exploit DB Packet Storm
984 8.8 HIGH
Network 		getkirby kirby Kirby is an open-source content management system. Kirby's user permissions control which user role is allowed to perform specific actions to content models in the CMS. These permissions are defined … Update CWE-863
 Incorrect Authorization 		CVE-2026-41325 2026-04-28 04:07 2026-04-24 Show GitHub Exploit DB Packet Storm
985 7.4 HIGH
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnP… Update CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42033 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
986 5.3 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, for stream request bodies, maxBodyLength is bypassed when maxRedirects is set to 0 (native http/https tra… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42034 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
987 5.3 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when responseType: 'stream' is used, Axios returns the response stream without enforcing maxContentLength… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42036 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
988 6.8 MEDIUM
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is incomplete. When no_proxy=localhost is set, requests… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42038 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
989 - - - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, toFormData recursively walks nested objects with no depth limit, so a deeply nested value passed as reque… Update CWE-674
 Uncontrolled Recursion 		CVE-2026-42039 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
990 3.7 LOW
Network 		- - Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/helpers/AxiosURLSearchParams.js contains a character mapping (charMap) at li… Update CWE-116
CWE-626
 Improper Encoding or Escaping of Output
 Null Byte Interaction Error (Poison Null Byte) 		CVE-2026-42040 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm