Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
981	-	-	Rockwell Automation	ArmorStart LT 291D ControlLogix Redundancy Enhanced Module 1756-RM2XT ControlLogix Redundancy Enhanced Module 1756-RM2 ArmorStart LT&nb…	複数のRockwell Automation製品における複数の脆弱性	CWE-400 CWE-401	CVE-2025-14027 CVE-2025-9278 CVE-2025-9279 CVE-2025-9280 CVE-2025-9281 CVE-2025-9282 CVE-2025-9283 CVE-2025-9464 CVE-2025-9465 CVE-2025-9466	2026-02-2 10:39	2026-01-30	Show	GitHub Exploit DB Packet Storm

982	9.8	緊急 Network	Ryan Cobb	Covenant	Ryan CobbのCovenantにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2020-36911	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

983	7.5	重要 Network	CuteSoft Components Inc.	Rich Text Editor for PHP	CuteSoft Components Inc.のRich Text Editor for PHPにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47751	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

984	7.5	重要 Network	Skyjos Ltd.	Owlfiles	Skyjos Ltd.のOwlfilesにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2022-50890	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

985	6.1	警告 Network	Skyjos Ltd.	Owlfiles	Skyjos Ltd.のOwlfilesにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2022-50891	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

986	5.5	警告 Local	Ian Back	mPDF	mPDF ProjectのmPDFにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2022-50897	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

987	8.8	重要 Network	kalyan02	NanoCMS	kalyan02のNanoCMSにおける複数の脆弱性	CWE-434 CWE-94	CVE-2022-50898	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

988	9.8	緊急 Network	Beehive Forum	Beehive Forum	Project Beehive ForumのBeehive Forumにおけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2022-50910	2026-01-30 14:14	2026-01-13	Show	GitHub Exploit DB Packet Storm

989	5.3	警告 Network	サムスン	Smart suggestions android	サムスン等の複数ベンダの製品における不特定の脆弱性	CWE-noinfo 情報不足	CVE-2023-21479	2026-01-30 14:14	2025-09-3	Show	GitHub Exploit DB Packet Storm

990	9.1	緊急 Network	ブロケードコミュニケーションズシステムズ株式会社	Active Support Connectivity Gateway	ブロケードコミュニケーションズシステムズ株式会社のActive Support Connectivity Gatewayにおける認証情報の保護しない転送に関する脆弱性	CWE-523 認証情報の保護しない転送	CVE-2024-1509	2026-01-30 14:14	2025-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
315211	-	sws	sws_simple_web_server	Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via mu…	NVD-CWE-Other	CVE-2002-1866	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315212	-	daniel_stenberg	dispair	Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.	NVD-CWE-Other	CVE-2002-1868	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315213	-	sws	sws_simple_web_server	Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitializ…	NVD-CWE-Other	CVE-2002-1870	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315214	-	astrocam	astrocam	astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected v…	CWE-20 Improper Input Validation	CVE-2002-1874	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315215	-	mcafee	entercept_agent	Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the en…	NVD-CWE-Other	CVE-2002-1875	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315216	-	w-agora	w-agora	PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter.	NVD-CWE-Other	CVE-2002-1878	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315217	-	lokwa	lokwabb	SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php.	NVD-CWE-Other	CVE-2002-1879	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315218	-	lokwa	lokwabb	LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.	NVD-CWE-Other	CVE-2002-1880	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315219	-	macromedia	flash_player	Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by…	NVD-CWE-Other	CVE-2002-1881	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

315220	-	oracle	e-business_suite	Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors.	NVD-CWE-Other	CVE-2002-1882	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed