Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1271 5.4 警告
Network 		HasThemes ht politic HasThemesのWordPress用ht politicにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-51673 2026-01-28 12:38 2024-11-9 Show GitHub Exploit DB Packet Storm
1272 7.2 重要
Network 		Openfind Mail2000 OpenfindのMail2000におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-5399 2026-01-28 12:38 2024-05-27 Show GitHub Exploit DB Packet Storm
1273 8.8 重要
Network 		Openfind Mail2000 OpenfindのMail2000におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2024-5400 2026-01-28 12:38 2024-05-27 Show GitHub Exploit DB Packet Storm
1274 6.1 警告
Network 		Backdrop backdrop Backdropのbackdropにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-54123 2026-01-28 12:38 2024-11-29 Show GitHub Exploit DB Packet Storm
1275 4.8 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-10023 2026-01-28 12:38 2025-10-27 Show GitHub Exploit DB Packet Storm
1276 4.8 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-12513 2026-01-28 12:38 2026-01-5 Show GitHub Exploit DB Packet Storm
1277 5.3 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-12519 2026-01-28 12:38 2026-01-5 Show GitHub Exploit DB Packet Storm
1278 4.8 警告
Network 		Centreon Centreon Web CentreonのCentreon Webにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-13056 2026-01-28 12:38 2026-01-5 Show GitHub Exploit DB Packet Storm
1279 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2025-13335 2026-01-28 12:38 2026-01-22 Show GitHub Exploit DB Packet Storm
1280 7.5 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-13927 2026-01-28 12:38 2026-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
304971 - mnscu_pals webpals PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter. NVD-CWE-Other
CVE-2001-0216 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
304972 - mnscu_pals webpals Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter. NVD-CWE-Other
CVE-2001-0217 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
304973 - brightstation muscat_empower Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter. NVD-CWE-Other
CVE-2001-0224 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
304974 - holger_lamm pgp4pine pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cle… NVD-CWE-Other
CVE-2001-0273 2017-07-11 10:29 2001-05-3 Show GitHub Exploit DB Packet Storm
304975 - oracle internet_directory oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink … NVD-CWE-Other
CVE-2001-0300 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
304976 - pgp openpgp The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message… NVD-CWE-Other
CVE-2001-0381 2017-07-11 10:29 2001-06-27 Show GitHub Exploit DB Packet Storm
304977 - oracle oracle8i Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3)… NVD-CWE-Other
CVE-2001-0499 2017-07-11 10:29 2001-07-21 Show GitHub Exploit DB Packet Storm
304978 - screaming_media siteware ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template paramet… NVD-CWE-Other
CVE-2001-0555 2017-07-11 10:29 2001-08-14 Show GitHub Exploit DB Packet Storm
304979 - cisco cbos Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain… NVD-CWE-Other
CVE-2001-0753 2017-07-11 10:29 2001-10-18 Show GitHub Exploit DB Packet Storm
304980 - sgi irix Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument. NVD-CWE-Other
CVE-2001-0799 2017-07-11 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm