Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1271	5.4	警告 Network	HasThemes	ht politic	HasThemesのWordPress用ht politicにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-51673	2026-01-28 12:38	2024-11-9	Show	GitHub Exploit DB Packet Storm

1272	7.2	重要 Network	Openfind	Mail2000	OpenfindのMail2000におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-5399	2026-01-28 12:38	2024-05-27	Show	GitHub Exploit DB Packet Storm

1273	8.8	重要 Network	Openfind	Mail2000	OpenfindのMail2000におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-5400	2026-01-28 12:38	2024-05-27	Show	GitHub Exploit DB Packet Storm

1274	6.1	警告 Network	Backdrop	backdrop	Backdropのbackdropにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-54123	2026-01-28 12:38	2024-11-29	Show	GitHub Exploit DB Packet Storm

1275	4.8	警告 Network	Centreon	Centreon Web	CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-10023	2026-01-28 12:38	2025-10-27	Show	GitHub Exploit DB Packet Storm

1276	4.8	警告 Network	Centreon	Centreon Web	CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-12513	2026-01-28 12:38	2026-01-5	Show	GitHub Exploit DB Packet Storm

1277	5.3	警告 Network	Centreon	Centreon Web	CentreonのCentreon Webにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-12519	2026-01-28 12:38	2026-01-5	Show	GitHub Exploit DB Packet Storm

1278	4.8	警告 Network	Centreon	Centreon Web	CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-13056	2026-01-28 12:38	2026-01-5	Show	GitHub Exploit DB Packet Storm

1279	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2025-13335	2026-01-28 12:38	2026-01-22	Show	GitHub Exploit DB Packet Storm

1280	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2025-13927	2026-01-28 12:38	2026-01-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304411	-	midnight_commander debian gentoo redhat suse turbolinux	midnight_commander debian_linux linux enterprise_linux linux_advanced_workstation suse_linux turbolinux_server turbolinux_workstation	Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."	NVD-CWE-Other	CVE-2004-1093	2017-07-11 10:30	2005-04-14	Show	GitHub Exploit DB Packet Storm

304412	-	zgv debian	xzgv_image_viewer zgv_image_viewer debian_linux	Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in …	NVD-CWE-Other	CVE-2004-1095	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304413	-	cherokee	cherokee_httpd	Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (a…	NVD-CWE-Other	CVE-2004-1097	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304414	-	roaring_penguin mandrakesoft suse	mimedefang mandrake_linux mandrake_linux_corporate_server suse_linux	MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.	NVD-CWE-Other	CVE-2004-1098	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304415	-	tips	mailpost	Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTM…	NVD-CWE-Other	CVE-2004-1100	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304416	-	tips	mailpost	Successful exploitation requires that debug mode is enabled.	NVD-CWE-Other	CVE-2004-1100	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304417	-	tips	mailpost	mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error messag…	NVD-CWE-Other	CVE-2004-1101	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304418	-	tips	mailpost	MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.	NVD-CWE-Other	CVE-2004-1102	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304419	-	tips	mailpost	MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path …	NVD-CWE-Other	CVE-2004-1103	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304420	-	nortel	contivity	Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.	NVD-CWE-Other	CVE-2004-1105	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed