Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1091	5.5	警告 Local	Weblate	wlc	Weblateのwlcにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-22250	2026-01-29 16:02	2026-01-12	Show	GitHub Exploit DB Packet Storm

1092	5.5	警告 Local	Weblate	wlc	Weblateのwlcにおける情報漏えいに関する脆弱性	CWE-200 CWE-noinfo	CVE-2026-22251	2026-01-29 16:02	2026-01-12	Show	GitHub Exploit DB Packet Storm

1093	9.8	緊急 Network	デル	powerscale onefs	デルのPowerScale OneFSにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-22278	2026-01-29 16:02	2026-01-22	Show	GitHub Exploit DB Packet Storm

1094	7.5	重要 Network	デル	powerscale onefs	デルのPowerScale OneFSにおける不十分なロギングに関する脆弱性	CWE-778 不十分なロギング	CVE-2026-22279	2026-01-29 16:02	2026-01-22	Show	GitHub Exploit DB Packet Storm

1095	5.5	警告 Local	デル	powerscale onefs	デルのPowerScale OneFSにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-22280	2026-01-29 16:02	2026-01-22	Show	GitHub Exploit DB Packet Storm

1096	4.8	警告 Adjacent	デル	powerscale onefs	デルのPowerScale OneFSにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-22281	2026-01-29 16:01	2026-01-22	Show	GitHub Exploit DB Packet Storm

1097	7.5	重要 Network	vLLM	vLLM	vLLMにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-22773	2026-01-29 16:01	2026-01-10	Show	GitHub Exploit DB Packet Storm

1098	8.8	重要 Network	Easy!Appointments project	Easy!Appointments	Easy!Appointmentsにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-23622	2026-01-29 16:01	2026-01-15	Show	GitHub Exploit DB Packet Storm

1099	3.7	低 Network	Apache Software Foundation	Karaf Decanter	Apache Software FoundationのKaraf Decanterにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-24656	2026-01-29 16:01	2026-01-26	Show	GitHub Exploit DB Packet Storm

1100	9.9	緊急 Network	Apache Software Foundation	Apache Continuum	Apache Software FoundationのApache Continuumにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2016-15057	2026-01-29 16:01	2026-01-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
283771	-	reamday_enterprises	magic_news_plus	Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the link_parameters parameter in (1) news.php and (2) n_layouts.ph…	CWE-79 Cross-site Scripting	CVE-2007-1142	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283772	-	jeunes-webmasters	j-web_pics_navigator	Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter.	CWE-22 Path Traversal	CVE-2007-1143	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283773	-	comscripts	j-web_pics_navigator	Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter.	CWE-22 Path Traversal	CVE-2007-1144	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283774	-	comscripts	j-web_pics_navigator	J-Web Pics Navigator is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and edit the…	CWE-22 Path Traversal	CVE-2007-1144	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283775	-	kayako	esupport	Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related…	CWE-79 Cross-site Scripting	CVE-2007-1145	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283776	-	delmaa.com	arabhost	PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter.	NVD-CWE-Other	CVE-2007-1146	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283777	-	hbm	hbm	PHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute arbitrary PHP code via a URL in the hbmpath parameter.	CWE-94 Code Injection	CVE-2007-1147	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283778	-	lovecms	lovecms	PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter.	CWE-94 Code Injection	CVE-2007-1148	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283779	-	lovecms	lovecms	Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the step parameter to install/index.php or (2) the load parameter …	CWE-22 Path Traversal	CVE-2007-1149	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm

283780	-	lovecms	lovecms	Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary files to /modules/content/pictures/tmp/.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2007-1150	2018-10-17 01:36	2007-03-3	Show	GitHub Exploit DB Packet Storm