Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1081 5.5 警告
Local 		クアルコム SA8195P ファームウェア
QCA6391 ファームウェア
sm8550p ファームウェア
Snapdragon 768g 5g Mobile Platform (sm7250-ac) Firmware
snapdragon 8+ gen 2&nbs… 		クアルコムのAR8035 ファームウェア等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-47369 2026-01-29 16:02 2026-01-7 Show GitHub Exploit DB Packet Storm
1082 7.8 重要
Local 		クアルコム SA8195P ファームウェア
QCM6690 ファームウェア
wcn7860 ファームウェア
WCD9385 ファームウェア
QMP1000 ファームウェア
qca6797aq ファームウェア
sa8295p ファームウェア
QAM8295P ファームウェア
SG61… 		クアルコムのfastconnect 6200 ファームウェア等の複数製品における不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-47382 2026-01-29 16:02 2025-12-18 Show GitHub Exploit DB Packet Storm
1083 7.8 重要
Local 		クアルコム fastconnect 6200 ファームウェア
fastconnect 6700 ファームウェア
SC8180X+SDX55 ファームウェア
QCS6490 ファームウェア
WCD9380 ファームウェア
QCA6391 ファームウェア
video collaborat… 		クアルコムのAQT1000 ファームウェア等の複数製品における信頼できないポインタデリファレンスに関する脆弱性 CWE-822
信頼性のないポインタデリファレンス 		CVE-2025-47387 2026-01-29 16:02 2025-12-18 Show GitHub Exploit DB Packet Storm
1084 8.8 重要
Network 		ThemeGoods Grand Conference ThemeGoodsのWordPress用Grand Conferenceにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-60116 2026-01-29 16:02 2025-09-26 Show GitHub Exploit DB Packet Storm
1085 8.8 重要
Network 		Apache Software Foundation Apache Kyuubi Apache Software FoundationのApache Kyuubiにおける複数の脆弱性 CWE-22
CWE-27
CVE-2025-66518 2026-01-29 16:02 2026-01-5 Show GitHub Exploit DB Packet Storm
1086 9.4 緊急
Network 		Abhishek S GYM-MANAGEMENT-SYSTEM Abhishek SのGYM-MANAGEMENT-SYSTEMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2025-67146 2026-01-29 16:02 2026-01-12 Show GitHub Exploit DB Packet Storm
1087 5.4 警告
Network 		DigitalVidhya Online Examination System Fabian RosのOnline Examination Systemにおける複数の脆弱性 CWE-79
CWE-79
CWE-94
CVE-2026-1421 2026-01-29 16:02 2026-01-26 Show GitHub Exploit DB Packet Storm
1088 9.8 緊急
Network 		DigitalVidhya Online Examination System Fabian RosのOnline Examination Systemにおける複数の脆弱性 CWE-74
CWE-89
CWE-89
CVE-2026-1422 2026-01-29 16:02 2026-01-26 Show GitHub Exploit DB Packet Storm
1089 9.8 緊急
Network 		DigitalVidhya Online Examination System Fabian RosのOnline Examination Systemにおける複数の脆弱性 CWE-284
CWE-434
CVE-2026-1423 2026-01-29 16:02 2026-01-26 Show GitHub Exploit DB Packet Storm
1090 7.8 重要
Local 		アップル Containerization
Container 		アップルのContainer等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-20613 2026-01-29 16:02 2026-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
304371 - bogofilter
ubuntu 		email_filter
ubuntu_linux 		The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a n… NVD-CWE-Other
CVE-2004-1007 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
304372 - putty
tortoisecvs 		putty
tortoisecvs 		Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads… NVD-CWE-Other
CVE-2004-1008 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
304373 - midnight_commander
debian
gentoo
redhat
suse
turbolinux 		midnight_commander
debian_linux
linux
enterprise_linux
linux_advanced_workstation
suse_linux
turbolinux_server
turbolinux_workstation 		Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. NVD-CWE-Other
CVE-2004-1009 2017-07-11 10:30 2005-04-14 Show GitHub Exploit DB Packet Storm
304374 - carnegie_mellon_university
openpkg
conectiva
redhat
trustix
ubuntu 		cyrus_imap_server
openpkg
linux
fedora_core
secure_linux
ubuntu_linux 		Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN comman… NVD-CWE-Other
CVE-2004-1011 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
304375 - carnegie_mellon_university
openpkg
conectiva
redhat
trustix
ubuntu 		cyrus_imap_server
openpkg
linux
fedora_core
secure_linux
ubuntu_linux 		The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a dif… NVD-CWE-Other
CVE-2004-1012 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
304376 - carnegie_mellon_university
redhat
ubuntu 		cyrus_imap_server
fedora_core
ubuntu_linux 		Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004… NVD-CWE-Other
CVE-2004-1015 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
304377 - php php The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vu… NVD-CWE-Other
CVE-2004-1020 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
304378 - apple ical iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms. NVD-CWE-Other
CVE-2004-1021 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
304379 - kerio kerio_mailserver
serverfirewall
winroute_firewall 		Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obt… NVD-CWE-Other
CVE-2004-1022 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
304380 - kerio kerio_mailserver
serverfirewall
winroute_firewall 		Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local … NVD-CWE-Other
CVE-2004-1023 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm