Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
971	9.8	緊急 Network	Qode Interactive	Grill and Chow	Qode InteractiveのWordPress用Grill and Chowにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2025-49297	2026-02-2 19:19	2025-06-9	Show	GitHub Exploit DB Packet Storm

972	9.8	緊急 Network	David Beazley	PLY (Python Lex-Yacc)	David BeazleyのPLY (Python Lex-Yacc)における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-56005	2026-02-2 19:19	2026-01-20	Show	GitHub Exploit DB Packet Storm

973	8.8	重要 Network	Ruijie Networks	X30 Pro ファームウェア RG-EW300T Firmware	Ruijie NetworksのRG-EW300T Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-56092	2026-02-2 19:19	2025-12-11	Show	GitHub Exploit DB Packet Storm

974	6.5	警告 Network	サイボウズ	サイボウズガルーン	サイボウズ Garoonにおける複数の脆弱性	CWE-79 CWE-Other	CVE-2026-20711 CVE-2026-22881 CVE-2026-22888	2026-02-2 12:21	2026-02-2	Show	GitHub Exploit DB Packet Storm

975	-	-	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Office Office Deployment Tool	Microsoft Office Click-To-Run Remote Code Execution Vulnerability	CWE-Other その他	CVE-2026-20943	2026-02-2 12:15	2026-02-2	Show	GitHub Exploit DB Packet Storm

976	7.6	重要 Network	Sonatype Inc.	Nexus	Sonatype Nexus Repositoryにおけるサーバサイドリクエストフォージェリの脆弱性	CWE-Other その他	CVE-2026-0600	2026-02-2 12:07	2026-02-2	Show	GitHub Exploit DB Packet Storm

977	8.8	重要 Network	RaspAP	raspap-webgui	raspap-webguiにおけるOSコマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-24788	2026-02-2 12:03	2026-02-2	Show	GitHub Exploit DB Packet Storm

978	-	-		-	サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01373)による影響について	-	CVE-2025-24519 CVE-2025-26694 CVE-2025-27710 CVE-2025-27713 CVE-2025-30509 CVE-2025-31937 CVE-2025-32088 CVE-2025-32446 CVE-2025-32732 CVE-2025-33000	2026-02-2 11:04	2026-01-30	Show	GitHub Exploit DB Packet Storm

979	-	-	BrightSign, LLC	BrightSignOS シリーズ 5 プレーヤー BrightSignOS シリーズ 4 プレーヤー	BrightSign製Brightsignプレーヤーにおける複数の脆弱性	CWE-250 不要な特権による実行	CVE-2025-3925 CVE-2025-54756	2026-02-2 10:53	2025-05-7	Show	GitHub Exploit DB Packet Storm

980	-	-	kiloview	P2 hardware E1 hardware RE1 hardware P1 hardware E2 hardware G1 hardware E1-s hardware	KiloView製エンコーダーシリーズにおける重要な機能に対する認証の欠如の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-1453	2026-02-2 10:39	2026-01-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314941	-	compaq	acms	ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data.	NVD-CWE-Other	CVE-2002-2000	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314942	-	compaq	tru64	ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap.	NVD-CWE-Other	CVE-2002-2003	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314943	-	compaq	tru64	portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.	NVD-CWE-Other	CVE-2002-2004	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314944	-	apache	tomcat	The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for…	NVD-CWE-Other	CVE-2002-2007	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314945	-	htdig	htdig	Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.	NVD-CWE-Other	CVE-2002-2010	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314946	-	jon_howell	faq-o-matic	Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter.	NVD-CWE-Other	CVE-2002-2011	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314947	-	apache	http_server	Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.	NVD-CWE-Other	CVE-2002-2012	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314948	-	mozilla netscape	mozilla communicator navigator	Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.	NVD-CWE-Other	CVE-2002-2013	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314949	-	ibm	lotus_domino	Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easi…	NVD-CWE-Other	CVE-2002-2014	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

314950	-	postnuke_software_foundation	postnuke	PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.	NVD-CWE-Other	CVE-2002-2015	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed