Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1311 6.4 警告
Network 		IBM IBM ApplinX IBMのIBM ApplinXにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-36408 2026-01-28 12:36 2026-01-20 Show GitHub Exploit DB Packet Storm
1312 5.4 警告
Network 		IBM IBM ApplinX IBMのIBM ApplinXにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-36409 2026-01-28 12:36 2026-01-20 Show GitHub Exploit DB Packet Storm
1313 4.3 警告
Network 		IBM IBM ApplinX IBMのIBM ApplinXにおけるサーバ側のセキュリティのクライアント側での実施に関する脆弱性 CWE-602
サーバ側のセキュリティのクライアント側での実施 		CVE-2025-36410 2026-01-28 12:36 2026-01-20 Show GitHub Exploit DB Packet Storm
1314 3.5 低
Network 		IBM IBM ApplinX IBMのIBM ApplinXにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-36411 2026-01-28 12:36 2026-01-20 Show GitHub Exploit DB Packet Storm
1315 9.8 緊急
Network 		IBM IBM ApplinX IBMのIBM ApplinXにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2025-36418 2026-01-28 12:36 2026-01-20 Show GitHub Exploit DB Packet Storm
1316 5.3 警告
Network 		IBM IBM ApplinX IBMのIBM ApplinXにおける重要な情報を含むサーバ生成のエラーメッセージに関する脆弱性 CWE-550
重要な情報を含むサーバ生成のエラーメッセージ 		CVE-2025-36419 2026-01-28 12:36 2026-01-20 Show GitHub Exploit DB Packet Storm
1317 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-37791 2026-01-28 12:36 2025-05-1 Show GitHub Exploit DB Packet Storm
1318 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
CWE-noinfo
CVE-2025-37966 2026-01-28 12:36 2025-05-20 Show GitHub Exploit DB Packet Storm
1319 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-38279 2026-01-28 12:36 2025-07-10 Show GitHub Exploit DB Packet Storm
1320 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-Other
その他 		CVE-2025-38288 2026-01-28 12:36 2025-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283441 - anon_proxy_server anon_proxy_server Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and po… CWE-94
Code Injection 		CVE-2007-6459 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
283442 - mkportal mkportal SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery foto_show action. CWE-89
SQL Injection 		CVE-2007-6467 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
283443 - phpay phpay Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot … CWE-22
Path Traversal 		CVE-2007-6471 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
283444 - rosoftengineering rosoft_media_player Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6478 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283445 - safenet sentinel_keys_server
sentinel_protection_server 		Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote … CWE-22
Path Traversal 		CVE-2007-6483 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283446 - centreon centreon Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to (1) MakeXML.php o… CWE-94
Code Injection 		CVE-2007-6485 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283447 - kvaliitti webdoc_cms Multiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to execute arbitrary SQL commands via (1) the cat_id parameter to categories.asp; and probably (2) the docume… CWE-89
NVD-CWE-noinfo
SQL Injection 		CVE-2007-6491 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283448 - imesh.com imesh The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 cr… CWE-20
 Improper Input Validation  		CVE-2007-6492 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283449 - imesh.com imesh The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to … CWE-20
 Improper Input Validation  		CVE-2007-6493 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283450 - hosting_controller hosting_controller Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request… CWE-20
 Improper Input Validation  		CVE-2007-6494 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm