JVN Vulnerability Search Top
Show Search Menu
|
You can search the list of vulnerabilities managed by JVN (Japan Vulnerability Note). |
Update Date:May 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3651 | 9.8 |
緊急
Network |
edu Business Solutions | Print Shop Pro WebDesk | edu Business SolutionsのPrint Shop Pro WebDeskにおけるSQL インジェクションの脆弱性 |
CWE-89
SQL Injection |
CVE-2025-61548 | 2026-01-27 17:35 | 2026-01-8 | Show | GitHub Exploit DB Packet Storm |
| 3652 | 6.5 |
警告
Network |
xlplugins | nextmove | xlpluginsのWordPress用nextmoveにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2025-62969 | 2026-01-27 17:35 | 2025-10-27 | Show | GitHub Exploit DB Packet Storm |
| 3653 | 7.5 |
重要
Network |
riot-os | riot | riot-osのriotにおけるNULL ポインタデリファレンスに関する脆弱性 |
CWE-476
NULL Pointer Dereference |
CVE-2025-66646 | 2026-01-27 17:35 | 2025-12-17 | Show | GitHub Exploit DB Packet Storm |
| 3654 | 9.8 |
緊急
Network |
riot-os | riot | riot-osのriotにおける古典的バッファオーバーフローの脆弱性 |
CWE-120
Classic Buffer Overflow |
CVE-2025-66647 | 2026-01-27 17:35 | 2025-12-17 | Show | GitHub Exploit DB Packet Storm |
| 3655 | 9.8 |
緊急
Network |
covid-19 contact tracing system project | covid-19 contact tracing system | covid-19 contact tracing system projectのcovid-19 contact tracing systemにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2025-66802 | 2026-01-27 17:34 | 2026-01-12 | Show | GitHub Exploit DB Packet Storm |
| 3656 | 6.5 |
警告
Network |
CouchCMS | couchcms | CouchCMSのcouchcmsにおけるパストラバーサルの脆弱性 |
CWE-22
Path Traversal |
CVE-2025-67004 | 2026-01-27 17:34 | 2026-01-9 | Show | GitHub Exploit DB Packet Storm |
| 3657 | 6.5 |
警告
Network |
InvoicePlane.com | InvoicePlane | InvoicePlane.comのInvoicePlaneにおけるSQL インジェクションの脆弱性 |
CWE-89
SQL Injection |
CVE-2025-67082 | 2026-01-27 17:34 | 2026-01-15 | Show | GitHub Exploit DB Packet Storm |
| 3658 | 5.3 |
警告
Network |
InvoicePlane.com | InvoicePlane | InvoicePlane.comのInvoicePlaneにおけるパストラバーサルの脆弱性 |
CWE-22
Path Traversal |
CVE-2025-67083 | 2026-01-27 17:34 | 2026-01-15 | Show | GitHub Exploit DB Packet Storm |
| 3659 | 9.9 |
緊急
Network |
InvoicePlane.com | InvoicePlane | InvoicePlane.comのInvoicePlaneにおけるPHPにおけるアップロードファイルに関する変数の不完全な識別に関する脆弱性 |
CWE-616
Incomplete Identification of Uploaded File Variables (PHP) |
CVE-2025-67084 | 2026-01-27 17:34 | 2026-01-15 | Show | GitHub Exploit DB Packet Storm |
| 3660 | 6.1 |
警告
Network |
ThemeGoods | Grand Restaurant WordPress | ThemeGoodsのWordPress用Grand Restaurant WordPressにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2025-67922 | 2026-01-27 17:34 | 2026-01-8 | Show | GitHub Exploit DB Packet Storm |
| 3661 | 8.8 |
重要
Network |
authlib | authlib | authlibにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
Origin Validation Error |
CVE-2025-68158 | 2026-01-27 17:34 | 2026-01-8 | Show | GitHub Exploit DB Packet Storm |
| 3662 | 8.6 |
重要
Network |
Espressif Systems | ESP-IDF | Espressif SystemsのESP-IDFにおける境界外書き込みに関する脆弱性 |
CWE-787
Out-of-bounds Write |
CVE-2025-68473 | 2026-01-27 17:34 | 2025-12-27 | Show | GitHub Exploit DB Packet Storm |
| 3663 | 7.6 |
重要
Adjacent |
Espressif Systems | ESP-IDF | Espressif SystemsのESP-IDFにおける境界外書き込みに関する脆弱性 |
CWE-787
Out-of-bounds Write |
CVE-2025-68474 | 2026-01-27 17:34 | 2025-12-27 | Show | GitHub Exploit DB Packet Storm |
| 3664 | 9.8 |
緊急
Network |
EDIMAX Technology | BR-6208AC ファームウェア | EDIMAX TechnologyのBR-6208AC ファームウェアにおけるコマンドインジェクションの脆弱性 |
CWE-77
Command Injection |
CVE-2025-70161 | 2026-01-27 17:34 | 2026-01-9 | Show | GitHub Exploit DB Packet Storm |
| 3665 | 6.1 |
警告
Network |
PHPGurukul | cyber cafe management system | PHPGurukulのcyber cafe management systemにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2025-70890 | 2026-01-27 17:34 | 2026-01-15 | Show | GitHub Exploit DB Packet Storm |
| 3666 | 6.1 |
警告
Network |
PHPGurukul | cyber cafe management system | PHPGurukulのcyber cafe management systemにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2025-70891 | 2026-01-27 17:34 | 2026-01-15 | Show | GitHub Exploit DB Packet Storm |
| 3667 | 9.8 |
緊急
Network |
PHPGurukul | cyber cafe management system | PHPGurukulのcyber cafe management systemにおけるSQL インジェクションの脆弱性 |
CWE-89
SQL Injection |
CVE-2025-70892 | 2026-01-27 17:34 | 2026-01-15 | Show | GitHub Exploit DB Packet Storm |
| 3668 | 8.8 |
重要
Network |
PHPGurukul | cyber cafe management system | PHPGurukulのcyber cafe management systemにおけるSQL インジェクションの脆弱性 |
CWE-89
SQL Injection |
CVE-2025-70893 | 2026-01-27 17:34 | 2026-01-15 | Show | GitHub Exploit DB Packet Storm |
| 3669 | 5.4 |
警告
Network |
GitLab.org | GitLab | GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
Cross-site Scripting |
CVE-2025-9222 | 2026-01-27 17:34 | 2026-01-9 | Show | GitHub Exploit DB Packet Storm |
| 3670 | 8.8 |
重要
Network |
SAP | Introscope Enterprise Manager | SAPのIntroscope Enterprise Managerにおけるコードインジェクションの脆弱性 |
CWE-94
Code Injection |
CVE-2026-0500 | 2026-01-27 17:34 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3671 | 8.1 |
重要
Network |
- | SAPのSAP Netweaver Application Server ABAPにおける認証の欠如に関する脆弱性 |
CWE-862
Missing Authorization |
CVE-2026-0506 | 2026-01-27 17:34 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm | |
| 3672 | 4.7 |
警告
Network |
SAP | SAP Supplier Relationship Management | SAPのSAP Supplier Relationship Managementにおけるオープンリダイレクトの脆弱性 |
CWE-601
Open Redirect |
CVE-2026-0513 | 2026-01-27 17:34 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3673 | 7.5 |
重要
Network |
Elasticsearch B.V. | Kibana | Elasticsearch B.V.のKibanaにおける配列インデックスの検証に関する脆弱性 |
CWE-129
Improper Validation of Array Index |
CVE-2026-0528 | 2026-01-27 17:34 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3674 | 6.5 |
警告
Network |
Elasticsearch B.V. | Kibana | Elasticsearch B.V.のKibanaにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2026-0530 | 2026-01-27 17:34 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3675 | 6.5 |
警告
Network |
Elasticsearch B.V. | Kibana | Elasticsearch B.V.のKibanaにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2026-0531 | 2026-01-27 17:34 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3676 | 6.5 |
警告
Network |
Elasticsearch B.V. | Kibana | Elasticsearch B.V.のKibanaにおける複数の脆弱性 |
CWE-20 CWE-770 Improper Input Validation Allocation of Resources Without Limits or Throttling |
CVE-2026-0543 | 2026-01-27 17:34 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3677 | 9.8 |
緊急
Network |
angeljudesuarez | society management system | Angel Jude Reyes Suarezのsociety management systemにおける複数の脆弱性 |
CWE-74 CWE-89 CWE-89 Injection SQL Injection SQL Injection |
CVE-2026-0582 | 2026-01-27 17:34 | 2026-01-5 | Show | GitHub Exploit DB Packet Storm |
| 3678 | 5.4 |
警告
Network |
RockOA | RockOA | RockOAにおける複数の脆弱性 |
CWE-79 CWE-79 CWE-94 Cross-site Scripting Cross-site Scripting Code Injection |
CVE-2026-0587 | 2026-01-27 17:34 | 2026-01-5 | Show | GitHub Exploit DB Packet Storm |
| 3679 | 6.1 |
警告
Network |
RockOA | RockOA | RockOAにおける複数の脆弱性 |
CWE-79 CWE-79 CWE-94 Cross-site Scripting Cross-site Scripting Code Injection |
CVE-2026-0588 | 2026-01-27 17:33 | 2026-01-5 | Show | GitHub Exploit DB Packet Storm |
| 3680 | 9.8 |
緊急
Network |
- | CampCodesのSupplier Management System using PHP/MySQLにおける複数の脆弱性 |
CWE-74 CWE-89 CWE-89 Injection SQL Injection SQL Injection |
CVE-2026-0597 | 2026-01-27 17:33 | 2026-01-5 | Show | GitHub Exploit DB Packet Storm | |
| 3681 | 7.2 |
重要
Network |
carmelo (Carmelo Garcia) | Intern Membership Management System | carmelo (Carmelo Garcia)のIntern Membership Management Systemにおける複数の脆弱性 |
CWE-74 CWE-89 CWE-89 Injection SQL Injection SQL Injection |
CVE-2026-0728 | 2026-01-27 17:33 | 2026-01-8 | Show | GitHub Exploit DB Packet Storm |
| 3682 | 7.2 |
重要
Network |
carmelo (Carmelo Garcia) | Intern Membership Management System | carmelo (Carmelo Garcia)のIntern Membership Management Systemにおける複数の脆弱性 |
CWE-74 CWE-89 CWE-89 Injection SQL Injection SQL Injection |
CVE-2026-0729 | 2026-01-27 17:33 | 2026-01-8 | Show | GitHub Exploit DB Packet Storm |
| 3683 | 3.3 |
低
Local |
Devolutions | Devolutions Remote Desktop Manager | DevolutionsのDevolutions Remote Desktop Managerにおける情報漏えいに関する脆弱性 |
CWE-200
Information Exposure |
CVE-2026-0747 | 2026-01-27 17:33 | 2026-01-8 | Show | GitHub Exploit DB Packet Storm |
| 3684 | 8.8 |
重要
Network |
QuickJS: The Next Generation | QuickJS | QuickJS: The Next GenerationのQuickJSにおける複数の脆弱性 |
CWE-119 CWE-122 CWE-787 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow Out-of-bounds Write |
CVE-2026-0822 | 2026-01-27 17:33 | 2026-01-10 | Show | GitHub Exploit DB Packet Storm |
| 3685 | 8.1 |
重要
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性 |
CWE-693
Protection Mechanism Failure |
CVE-2026-0877 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3686 | 8 |
重要
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 |
CWE-119 CWE-20 Incorrect Access of Indexable Resource ('Range Error') Improper Input Validation |
CVE-2026-0878 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3687 | 9.8 |
緊急
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2026-0879 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3688 | 8.8 |
重要
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における整数オーバーフローの脆弱性 |
CWE-190
Integer Overflow or Wraparound |
CVE-2026-0880 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3689 | 10 |
緊急
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 |
CWE-284 CWE-693 Improper Access Control Protection Mechanism Failure |
CVE-2026-0881 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3690 | 8.8 |
重要
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 |
CWE-416
Use After Free |
CVE-2026-0882 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3691 | 5.3 |
警告
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性 |
CWE-200
Information Exposure |
CVE-2026-0883 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3692 | 9.8 |
緊急
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 |
CWE-416
Use After Free |
CVE-2026-0884 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3693 | 6.5 |
警告
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 |
CWE-416
Use After Free |
CVE-2026-0885 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3694 | 5.3 |
警告
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2026-0886 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3695 | 4.3 |
警告
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性 |
CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere |
CVE-2026-0887 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3696 | 5.3 |
警告
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性 |
CWE-200
Information Exposure |
CVE-2026-0888 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3697 | 5.4 |
警告
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品におけるスプーフィングによる認証回避に関する脆弱性 |
CWE-290
Authentication Bypass by Spoofing |
CVE-2026-0890 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3698 | 8.1 |
重要
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2026-0891 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3699 | 9.8 |
緊急
Network |
Mozilla Foundation |
Mozilla Thunderbird Mozilla Firefox |
Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2026-0892 | 2026-01-27 17:33 | 2026-01-13 | Show | GitHub Exploit DB Packet Storm |
| 3700 | 9.8 |
緊急
Network |
シスコシステムズ |
Cisco Unified Communications Manager IM and Presence Service Cisco Unity Connection Cisco Unified Communications Manager |
シスコシステムズのCisco Unified Communications Manager等の複数製品におけるコードインジェクションの脆弱性 |
CWE-94
Code Injection |
CVE-2026-20045 | 2026-01-27 17:33 | 2026-01-21 | Show | GitHub Exploit DB Packet Storm |