Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1001 9.8 緊急
Network 		Blue Access Technologies Inc. Cobalt X1 Blue Access Technologies Inc.のCobalt X1における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-60534 2026-01-30 14:13 2026-01-6 Show GitHub Exploit DB Packet Storm
1002 6.5 警告
Network 		Marquitos mcp-shell Marquitosのmcp-shellにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2025-61489 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
1003 9.8 緊急
Network 		NJHYST HY511 POE core devices Firmware NJHYSTのHY511 POE core devices Firmwareにおける検証および完全性チェックを行っていない Cookie への依存に関する脆弱性 CWE-565
検証および完全性チェックを行っていない Cookie への依存 		CVE-2025-65212 2026-01-30 14:13 2026-01-6 Show GitHub Exploit DB Packet Storm
1004 7.5 重要
Network 		OpenAirInterface Software Alliance OpenAir CN 5G for AMF OpenAirInterface Software AllianceのOpenAir CN 5G for AMFにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2025-65805 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
1005 7.5 重要
Network 		OpenAirInterface Software Alliance OpenAir CN 5G for AMF OpenAirInterface Software AllianceのOpenAir CN 5G for AMFにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2025-66786 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
1006 7.5 重要
Network 		efforthye fast-filesystem-mcp efforthyeのfast-filesystem-mcpにおけるパストラバーサルの脆弱性 CWE-24
パストラバーサル (../filedir) 		CVE-2025-67364 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
1007 7.5 重要
Network 		Sylphx Filesystem MCP SylphxのFilesystem MCPにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2025-67366 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
1008 3.8 低
Network 		Eli Hanna Compress & Upload Eli HannaのWordPress用Compress & Uploadにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2025-8889 2026-01-30 14:13 2025-09-9 Show GitHub Exploit DB Packet Storm
1009 5.4 警告
Network 		ngsurvey ngsurvey ngsurveyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-15479 2026-01-30 14:13 2026-01-7 Show GitHub Exploit DB Packet Storm
1010 6.1 警告
Network 		WPForms wpforms WPFormsのWordPress用wpformsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2020-36919 2026-01-30 14:13 2026-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307081 - smail smail modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc. NVD-CWE-Other
CVE-2005-0893 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
307082 - openmosixview openmosixview OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (… NVD-CWE-Other
CVE-2005-0894 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
307083 - netcomm nb1300 Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets. NVD-CWE-Other
CVE-2005-0895 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
307084 - accomplishtechnology phpmydirectory Multiple cross-site scripting (XSS) vulnerabilities in review.php in phpMyDirectory 10.1.3-rel allow remote attackers to inject arbitrary web script or HTML via the (1) subcat, (2) page, or (3) subsu… CWE-79
Cross-site Scripting 		CVE-2005-0896 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
307085 - magicscripts e-store_kit-2 PHP remote file inclusion vulnerability in catalog.php in E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary PHP code by modifying the menu and main parameters to reference a U… NVD-CWE-Other
CVE-2005-0897 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
307086 - magicscripts e-store_kit-2 Cross-site scripting (XSS) vulnerability in downloadform.php in E-Store Kit-2 PayPal Edition allows remote attackers to inject arbitrary web script or HTML via the txn_id parameter. NVD-CWE-Other
CVE-2005-0898 2016-10-18 12:15 2005-03-26 Show GitHub Exploit DB Packet Storm
307087 - ibm os_400 AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search. NVD-CWE-Other
CVE-2005-0899 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
307088 - nukebookmarks nukebookmarks marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message. NVD-CWE-Other
CVE-2005-0900 2016-10-18 12:15 2005-03-26 Show GitHub Exploit DB Packet Storm
307089 - nukebookmarks nukebookmarks Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or … NVD-CWE-Other
CVE-2005-0901 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
307090 - nukebookmarks nukebookmarks SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter. NVD-CWE-Other
CVE-2005-0902 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm