Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2121	9.8	緊急 Network	ThemeMove	UniCamp	ThemeMoveのWordPress用UniCampにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-54701	2026-02-6 10:40	2025-08-14	Show	GitHub Exploit DB Packet Storm

2122	5.3	警告 Network	Codeshare	Codeshare	Codeshareにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2025-60925	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

2123	6.1	警告 Network	Zucchetti s.p.a.	Infinity Zucchetti ZMaintenance Infinity	Zucchetti s.p.a.のZMaintenance Infinity等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-61431	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

2124	9.1	緊急 Network	Shopify	remix-run/deno @remix-run/node @react-router/node	Shopifyの@react-router/node等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-61686	2026-02-6 10:40	2026-01-10	Show	GitHub Exploit DB Packet Storm

2125	9.8	緊急 Network	EUROLAB srl	ELTS 100 Firmware	EUROLAB srlのELTS 100 Firmwareにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-63225	2026-02-6 10:40	2025-11-18	Show	GitHub Exploit DB Packet Storm

2126	3.5	低 Adjacent	Freebox	Freebox One Firmware Freebox v5 HD Firmware Freebox v5 Crystal Firmware Freebox v6 Revolution Firmware Freebox Mini 4K&nbs…	FreeboxのFreebox Mini 4K Firmware等の複数製品における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2025-63292	2026-02-6 10:40	2025-11-17	Show	GitHub Exploit DB Packet Storm

2127	6.5	警告 Network	workdo	HRM SaaS	WorkDoのHRM SaaSにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-63294	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

2128	7.5	重要 Network	kiloview	E3 Firmware	Kiloview Electronics Co., Ltd.のE3 Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-63560	2026-02-6 10:40	2025-11-6	Show	GitHub Exploit DB Packet Storm

2129	6.5	警告 Network	GuoMinJim	PersonManage	GuoMinJimのPersonManageにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-63686	2026-02-6 10:40	2025-11-7	Show	GitHub Exploit DB Packet Storm

2130	5.4	警告 Network	Magento, Inc.	E-Commerce	Bhabishya-123のE-commerceにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63883	2026-02-6 10:40	2025-11-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348531	-	summit_computer_networks	lil_http	Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.	NVD-CWE-Other	CVE-2002-2076	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348532	-	floosietek	ftgateoffice ftgatepro	Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP US…	NVD-CWE-Other	CVE-2002-2078	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348533	-	mosix_project openmosix_project	mosix openmosix	mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial of service via malformed packets.	NVD-CWE-Other	CVE-2002-2079	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348534	-	floosietek	ftgatepro	Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large number of RCPT TO: messages during an SMTP session.	NVD-CWE-Other	CVE-2002-2080	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348535	-	microsoft	site_server site_server_commerce	cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to…	NVD-CWE-Other	CVE-2002-2081	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348536	-	floosietek	ftgateoffice ftgatepro	FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users.	NVD-CWE-Other	CVE-2002-2082	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348537	-	novell	netware	The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware log…	NVD-CWE-Other	CVE-2002-2083	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348538	-	portix-php	portix-php	Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) l and (2) topic parameters.	NVD-CWE-Other	CVE-2002-2084	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348539	-	wwwebbb	wwwebbb_forum	Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.	NVD-CWE-Other	CVE-2002-2085	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348540	-	borland_software	interbase	Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server.	NVD-CWE-Other	CVE-2002-2087	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm