JVN Vulnerability Search Top
Show Search Menu
|
You can search the list of vulnerabilities managed by JVN (Japan Vulnerability Note). |
Update Date:May 2, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2751 | 6.1 |
警告
Network |
WeGIA | WeGIA | WeGIAにおけるオープンリダイレクトの脆弱性 |
CWE-601
Open Redirect |
CVE-2026-23728 | 2026-02-2 19:33 | 2026-01-16 | Show | GitHub Exploit DB Packet Storm |
| 2752 | 6.1 |
警告
Network |
WeGIA | WeGIA | WeGIAにおけるオープンリダイレクトの脆弱性 |
CWE-601
Open Redirect |
CVE-2026-23729 | 2026-02-2 19:33 | 2026-01-16 | Show | GitHub Exploit DB Packet Storm |
| 2753 | 6.1 |
警告
Network |
WeGIA | WeGIA | WeGIAにおけるオープンリダイレクトの脆弱性 |
CWE-601
Open Redirect |
CVE-2026-23730 | 2026-02-2 19:33 | 2026-01-16 | Show | GitHub Exploit DB Packet Storm |
| 2754 | 4.3 |
警告
Network |
WeGIA | WeGIA | WeGIAにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 |
CWE-1021
Improper Restriction of Rendered UI Layers or Frames |
CVE-2026-23731 | 2026-02-2 19:33 | 2026-01-16 | Show | GitHub Exploit DB Packet Storm |
| 2755 | 7.5 |
重要
Network |
Discourse | Discourse | Discourseにおける情報漏えいに関する脆弱性 |
CWE-200
Information Exposure |
CVE-2026-23743 | 2026-02-2 19:33 | 2026-01-28 | Show | GitHub Exploit DB Packet Storm |
| 2756 | 6.1 |
警告
Network |
b3log | SiYuan | B3logのSiYuanにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2026-23847 | 2026-02-2 19:33 | 2026-01-19 | Show | GitHub Exploit DB Packet Storm |
| 2757 | 7.5 |
重要
Network |
b3log | SiYuan | B3logのSiYuanにおけるパストラバーサルの脆弱性 |
CWE-22
Path Traversal |
CVE-2026-23850 | 2026-02-2 19:33 | 2026-01-19 | Show | GitHub Exploit DB Packet Storm |
| 2758 | 6.5 |
警告
Network |
b3log | SiYuan | B3logのSiYuanにおけるパストラバーサルの脆弱性 |
CWE-22
Path Traversal |
CVE-2026-23851 | 2026-02-2 19:33 | 2026-01-19 | Show | GitHub Exploit DB Packet Storm |
| 2759 | 9.6 |
緊急
Network |
b3log | SiYuan | B3logのSiYuanにおける複数の脆弱性 |
CWE-79 CWE-94 Cross-site Scripting Code Injection |
CVE-2026-23852 | 2026-02-2 19:33 | 2026-01-19 | Show | GitHub Exploit DB Packet Storm |
| 2760 | 5.5 |
警告
Local |
ImageMagick | ImageMagick | ImageMagickにおける無限ループに関する脆弱性 |
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop') |
CVE-2026-23874 | 2026-02-2 19:33 | 2026-01-20 | Show | GitHub Exploit DB Packet Storm |
| 2761 | 9.8 |
緊急
Network |
ImageMagick | ImageMagick | ImageMagickにおける複数の脆弱性 |
CWE-122 CWE-190 Heap-based Buffer Overflow Integer Overflow or Wraparound |
CVE-2026-23876 | 2026-02-2 19:33 | 2026-01-20 | Show | GitHub Exploit DB Packet Storm |
| 2762 | 8.7 |
重要
Adjacent |
Linux Containers | Incus | Linux ContainersのIncusにおけるCRLF インジェクションの脆弱性 |
CWE-93
CRLF Injection |
CVE-2026-23953 | 2026-02-2 19:33 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2763 | 8.7 |
重要
Adjacent |
Linux Containers | Incus | Linux ContainersのIncusにおけるパストラバーサルの脆弱性 |
CWE-22
Path Traversal |
CVE-2026-23954 | 2026-02-2 19:33 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2764 | 8 |
重要
Network |
Horilla | Horilla | Horilla Inc.のHorillaにおける複数の脆弱性 |
CWE-434 CWE-474 CWE-74 Unrestricted Upload of File with Dangerous Type Use of Function with Inconsistent Implementations Injection |
CVE-2026-24010 | 2026-02-2 19:33 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2765 | 5.4 |
警告
Network |
Horilla | Horilla | Horilla Inc.のHorillaにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2026-24034 | 2026-02-2 19:32 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2766 | 4.3 |
警告
Network |
Horilla | Horilla | Horilla Inc.のHorillaにおけるアクセス制御に関する脆弱性 |
CWE-284
Improper Access Control |
CVE-2026-24035 | 2026-02-2 19:32 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2767 | 5.3 |
警告
Network |
Horilla | Horilla | Horilla Inc.のHorillaにおけるアクセス制御に関する脆弱性 |
CWE-284
Improper Access Control |
CVE-2026-24036 | 2026-02-2 19:32 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2768 | 5.4 |
警告
Network |
Horilla | Horilla | Horilla Inc.のHorillaにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2026-24037 | 2026-02-2 19:32 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2769 | 8.1 |
重要
Network |
Horilla | Horilla | Horilla Inc.のHorillaにおける認証に関する脆弱性 |
CWE-287
Improper Authentication |
CVE-2026-24038 | 2026-02-2 19:32 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2770 | 4.3 |
警告
Network |
Horilla | Horilla | Horilla Inc.のHorillaにおけるアクセス制御に関する脆弱性 |
CWE-284
Improper Access Control |
CVE-2026-24039 | 2026-02-2 19:32 | 2026-01-22 | Show | GitHub Exploit DB Packet Storm |
| 2771 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-190 CWE-20 Integer Overflow or Wraparound Improper Input Validation |
CVE-2026-24403 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2772 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-20 CWE-476 CWE-690 CWE-758 Improper Input Validation NULL Pointer Dereference Unchecked Return Value to NULL Pointer Dereference Reliance on Undefined, Unspecified, or Implementation-Defined Behavior |
CVE-2026-24404 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2773 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-122 CWE-20 Heap-based Buffer Overflow Improper Input Validation |
CVE-2026-24405 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2774 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-122 CWE-20 Heap-based Buffer Overflow Improper Input Validation |
CVE-2026-24406 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2775 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-20 CWE-758 Improper Input Validation Reliance on Undefined, Unspecified, or Implementation-Defined Behavior |
CVE-2026-24407 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2776 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-20 CWE-476 CWE-690 CWE-758 Improper Input Validation NULL Pointer Dereference Unchecked Return Value to NULL Pointer Dereference Reliance on Undefined, Unspecified, or Implementation-Defined Behavior |
CVE-2026-24409 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2777 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-20 CWE-476 CWE-690 CWE-758 Improper Input Validation NULL Pointer Dereference Unchecked Return Value to NULL Pointer Dereference Reliance on Undefined, Unspecified, or Implementation-Defined Behavior |
CVE-2026-24410 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2778 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-20 CWE-476 CWE-690 CWE-758 Improper Input Validation NULL Pointer Dereference Unchecked Return Value to NULL Pointer Dereference Reliance on Undefined, Unspecified, or Implementation-Defined Behavior |
CVE-2026-24411 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2779 | 8.8 |
重要
Network |
International Color Consortium (ICC) | iccDEV | International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 |
CWE-122 CWE-20 Heap-based Buffer Overflow Improper Input Validation |
CVE-2026-24412 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2780 | 6.5 |
警告
Network |
phpMyFAQ | phpMyFAQ | phpMyFAQにおける認証の欠如に関する脆弱性 |
CWE-862
Missing Authorization |
CVE-2026-24421 | 2026-02-2 19:32 | 2026-01-24 | Show | GitHub Exploit DB Packet Storm |
| 2781 | 8.8 |
重要
Network |
Shenzhen Tenda Technology Co.,Ltd. | w30e ファームウェア | Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおける不正な認証に関する脆弱性 |
CWE-863
Incorrect Authorization |
CVE-2026-24428 | 2026-02-2 19:32 | 2026-01-26 | Show | GitHub Exploit DB Packet Storm |
| 2782 | 9.8 |
緊急
Network |
Shenzhen Tenda Technology Co.,Ltd. | w30e ファームウェア | Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおけるデフォルトのパスワードの使用に関する脆弱性 |
CWE-1393
Use of Default Password |
CVE-2026-24429 | 2026-02-2 19:32 | 2026-01-26 | Show | GitHub Exploit DB Packet Storm |
| 2783 | 9.8 |
緊急
Network |
libexpat project | libexpat | libexpat projectのlibexpatにおけるNULL ポインタデリファレンスに関する脆弱性 |
CWE-476
NULL Pointer Dereference |
CVE-2026-24515 | 2026-02-2 19:32 | 2026-01-23 | Show | GitHub Exploit DB Packet Storm |
| 2784 | 6.5 |
警告
Network |
Discourse | Discourse | Discourseにおける不正な認証に関する脆弱性 |
CWE-863
Incorrect Authorization |
CVE-2026-24742 | 2026-02-2 19:32 | 2026-01-28 | Show | GitHub Exploit DB Packet Storm |
| 2785 | 8.8 |
重要
Network |
Linux Foundation | pytorch | Linux Foundationのpytorchにおける複数の脆弱性 |
CWE-502 CWE-94 Deserialization of Untrusted Data Code Injection |
CVE-2026-24747 | 2026-02-2 19:32 | 2026-01-27 | Show | GitHub Exploit DB Packet Storm |
| 2786 | 9.8 |
緊急
Network |
infiniflow | ragflow | infiniflowのragflowにおけるパストラバーサルの脆弱性 |
CWE-22
Path Traversal |
CVE-2026-24770 | 2026-02-2 19:32 | 2026-01-27 | Show | GitHub Exploit DB Packet Storm |
| 2787 | 7.1 |
重要
Network |
vLLM | vLLM | vLLMにおけるサーバサイドのリクエストフォージェリの脆弱性 |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2026-24779 | 2026-02-2 19:32 | 2026-01-27 | Show | GitHub Exploit DB Packet Storm |
| 2788 | 7.5 |
重要
Network |
Mozilla Foundation | Mozilla Firefox | Mozilla FoundationのMozilla Firefoxにおける保護メカニズムの不具合に関する脆弱性 |
CWE-693
Protection Mechanism Failure |
CVE-2026-24868 | 2026-02-2 19:32 | 2026-01-27 | Show | GitHub Exploit DB Packet Storm |
| 2789 | 8.1 |
重要
Network |
Mozilla Foundation | Mozilla Firefox | Mozilla FoundationのMozilla Firefoxにおける解放済みメモリの使用に関する脆弱性 |
CWE-416
Use After Free |
CVE-2026-24869 | 2026-02-2 19:31 | 2026-01-27 | Show | GitHub Exploit DB Packet Storm |
| 2790 | 8.2 |
重要
Network |
ThemeMove | SmilePure | ThemeMoveのWordPress用SmilePureにおけるPHP リモートファイルインクルージョンの脆弱性 |
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
CVE-2025-58958 | 2026-02-2 19:31 | 2025-10-22 | Show | GitHub Exploit DB Packet Storm |
| 2791 | 8.2 |
重要
Network |
ThemeMove | Businext | ThemeMoveのWordPress用BusinextにおけるPHP リモートファイルインクルージョンの脆弱性 |
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
CVE-2025-58967 | 2026-02-2 19:31 | 2025-10-22 | Show | GitHub Exploit DB Packet Storm |
| 2792 | 7.6 |
重要
Network |
Shopify |
Remix React Router |
ShopifyのReact Router等の複数製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2025-59057 | 2026-02-2 19:31 | 2026-01-10 | Show | GitHub Exploit DB Packet Storm |
| 2793 | 8.1 |
重要
Network |
ThemeMove | Medizin | ThemeMoveのWordPress用MedizinにおけるPHP リモートファイルインクルージョンの脆弱性 |
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
CVE-2025-59555 | 2026-02-2 19:31 | 2025-10-22 | Show | GitHub Exploit DB Packet Storm |
| 2794 | 8.1 |
重要
Network |
ThemeMove | Billey | ThemeMoveのWordPress用BilleyにおけるPHP リモートファイルインクルージョンの脆弱性 |
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
CVE-2025-59558 | 2026-02-2 19:31 | 2025-10-22 | Show | GitHub Exploit DB Packet Storm |
| 2795 | 8.1 |
重要
Network |
ThemeMove | EduMall | ThemeMoveのWordPress用EduMallにおけるPHP リモートファイルインクルージョンの脆弱性 |
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
CVE-2025-59564 | 2026-02-2 19:31 | 2025-10-22 | Show | GitHub Exploit DB Packet Storm |
| 2796 | 8.1 |
重要
Network |
ThemeMove | Minimogwp | ThemeMoveのWordPress用MinimogwpにおけるPHP リモートファイルインクルージョンの脆弱性 |
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
CVE-2025-60069 | 2026-02-2 19:31 | 2025-12-18 | Show | GitHub Exploit DB Packet Storm |
| 2797 | 10 |
緊急
Network |
GongRzhe | Terminal Controller for MCP | GongRzheのTerminal Controller for MCPにおけるコマンドインジェクションの脆弱性 |
CWE-77
Command Injection |
CVE-2025-61492 | 2026-02-2 19:31 | 2026-01-7 | Show | GitHub Exploit DB Packet Storm |
| 2798 | 7.5 |
重要
Network |
wpwebelite | Follow My Blog Post | WPWeb EliteのWordPress用Follow My Blog Postにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 |
CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere |
CVE-2025-64258 | 2026-02-2 19:31 | 2025-12-18 | Show | GitHub Exploit DB Packet Storm |
| 2799 | 5.4 |
警告
Network |
Qode Interactive | Bard | Qode InteractiveのWordPress用Bardにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
Origin Validation Error |
CVE-2025-64368 | 2026-02-2 19:31 | 2025-10-31 | Show | GitHub Exploit DB Packet Storm |
| 2800 | 5.3 |
警告
Network |
XWiki | Full Calendar Macro (macro-fullcalendar-pom) | XWikiのFull Calendar Macro (macro-fullcalendar-pom)における情報漏えいに関する脆弱性 |
CWE-200
Information Exposure |
CVE-2025-65090 | 2026-02-2 19:31 | 2026-01-10 | Show | GitHub Exploit DB Packet Storm |