Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1	9.8	緊急 Network	scshr	hr portal	scshrのhr portalにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-48780	2026-02-6 10:41	2025-06-6	Show	GitHub Exploit DB Packet Storm

2	7.5	重要 Network	scshr	hr portal	scshrのhr portalにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2025-48781	2026-02-6 10:41	2025-06-6	Show	GitHub Exploit DB Packet Storm

3	9.8	緊急 Network	scshr	hr portal	scshrのhr portalにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2025-48782	2026-02-6 10:41	2025-06-6	Show	GitHub Exploit DB Packet Storm

4	7.5	重要 Network	scshr	hr portal	scshrのhr portalにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2025-48783	2026-02-6 10:41	2025-06-6	Show	GitHub Exploit DB Packet Storm

5	7.5	重要 Network	scshr	hr portal	scshrのhr portalにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-48784	2026-02-6 10:41	2025-06-6	Show	GitHub Exploit DB Packet Storm

6	7.5	重要 Network	scshr	hr portal	scshrのhr portalにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-5192	2026-02-6 10:41	2025-06-6	Show	GitHub Exploit DB Packet Storm

7	6.8	警告 Physics	Elspec LTD	G5DFR ファームウェア	Elspec LTDのG5DFR ファームウェアにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2025-59392	2026-02-6 10:41	2025-11-6	Show	GitHub Exploit DB Packet Storm

8	7.2	重要 Network	Sangoma	freepbx	SangomaのfreepbxにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-64328	2026-02-6 10:41	2025-11-7	Show	GitHub Exploit DB Packet Storm

9	6.5	警告 Network	Salesforce.com, inc.	MuleSoft Anypoint Extension Pack	Salesforce.com, inc.のMuleSoft Anypoint Extension Packにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-10875	2026-02-6 10:41	2025-11-4	Show	GitHub Exploit DB Packet Storm

10	7.5	重要 Network	Intelbras	ICIP 30 Firmware	IntelbrasのICIP 30 Firmwareにおける複数の脆弱性	CWE-255 CWE-256 CWE-522	CVE-2025-13187	2026-02-6 10:41	2025-11-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307601	-	condor_project	condor	Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors.	NVD-CWE-noinfo CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-3826	2011-03-8 12:11	2008-10-9	Show	GitHub Exploit DB Packet Storm

307602	-	condor_project	condor	Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-3828	2011-03-8 12:11	2008-10-9	Show	GitHub Exploit DB Packet Storm

307603	-	condor_project	condor	Unspecified vulnerability in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) via unknown vectors.	NVD-CWE-noinfo	CVE-2008-3829	2011-03-8 12:11	2008-10-9	Show	GitHub Exploit DB Packet Storm

307604	-	condor_project	condor	Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-3830	2011-03-8 12:11	2008-10-9	Show	GitHub Exploit DB Packet Storm

307605	-	django_project	django	The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to con…	CWE-352 Origin Validation Error	CVE-2008-3909	2011-03-8 12:11	2008-09-5	Show	GitHub Exploit DB Packet Storm

307606	-	adobe	robohelp_server	Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log.	CWE-79 Cross-site Scripting	CVE-2008-2991	2011-03-8 12:10	2008-07-10	Show	GitHub Exploit DB Packet Storm

307607	-	ibm	websphere_application_server	Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application Server (WAS) 5.1 before 5.1.1.19 has unknown impact and attack vectors.	NVD-CWE-noinfo CWE-255 Credentials Management	CVE-2008-3235	2011-03-8 12:10	2008-07-22	Show	GitHub Exploit DB Packet Storm

307608	-	novell	imanager	Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors.	NVD-CWE-noinfo CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-3488	2011-03-8 12:10	2008-08-7	Show	GitHub Exploit DB Packet Storm

307609	-	adobe	presenter	Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in…	CWE-79 Cross-site Scripting	CVE-2008-3515	2011-03-8 12:10	2008-08-13	Show	GitHub Exploit DB Packet Storm

307610	-	adobe	presenter	Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in…	CWE-79 Cross-site Scripting	CVE-2008-3516	2011-03-8 12:10	2008-08-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed