Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1371	7.4	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける未チェックの戻り値に関する脆弱性	CWE-252 未チェックの戻り値	CVE-2026-0723	2026-01-28 12:34	2026-01-22	Show	GitHub Exploit DB Packet Storm

1372	7.5	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-1102	2026-01-28 12:34	2026-01-22	Show	GitHub Exploit DB Packet Storm

1373	7.8	重要 Local	マイクロソフト	Office Long Term Servicing Channel (LTSC) Microsoft Office Microsoft 365 Apps	Microsoft Office のセキュリティ機能のバイパスの脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-21509	2026-01-28 12:34	2026-01-26	Show	GitHub Exploit DB Packet Storm

1374	9.8	緊急 Network	Oxygenz	ClipBucket V5	OxygenzのClipBucket V5におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-21875	2026-01-28 12:34	2026-01-8	Show	GitHub Exploit DB Packet Storm

1375	7.3	重要 Local	greenshot	Greenshot	getgreenshot.orgのGreenshotにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-22035	2026-01-28 12:34	2026-01-8	Show	GitHub Exploit DB Packet Storm

1376	6.5	警告 Network	Rocket.Chat	Rocket.Chat	Rocket.Chatにおける複数の脆弱性	CWE-269 CWE-862	CVE-2026-23477	2026-01-28 12:34	2026-01-14	Show	GitHub Exploit DB Packet Storm

1377	9.8	緊急 Network	GNU Project Debian	Debian GNU/Linux inetutils	Debian等の複数ベンダの製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-24061	2026-01-28 12:34	2026-01-21	Show	GitHub Exploit DB Packet Storm

1378	7.2	重要 Network	HGiga	isherlock	HGigaのisherlockにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-4298	2026-01-28 12:31	2024-04-29	Show	GitHub Exploit DB Packet Storm

1379	7.2	重要 Network	HGiga	isherlock	HGigaのisherlockにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-4299	2026-01-28 12:31	2024-04-29	Show	GitHub Exploit DB Packet Storm

1380	7.9	重要 Local	ARM Ltd.	Neoverse V3 ファームウェア Arm C1-Premium ファームウェア Cortex-X925 ファームウェア Cortex-X4 ファームウェア Neoverse V3AE ファームウェア Neoverse V2 ファームウェア Cortex-X…	ARM Ltd.のArm C1-Premium ファームウェア等の複数製品における再利用前に削除されていないリソース内重要情報に関する脆弱性	CWE-226 再利用前に削除されていないリソース内重要情報	CVE-2025-0647	2026-01-28 12:31	2026-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304501	-	sugarcrm	sugar_sales	Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the …	NVD-CWE-Other	CVE-2004-1227	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304502	-	sugarcrm	sugar_sales	The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation…	NVD-CWE-Other	CVE-2004-1228	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304503	-	gadu-gadu	gadu-gadu_instant_messenger	Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as…	NVD-CWE-Other	CVE-2004-1230	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304504	-	gadu-gadu	gadu-gadu_instant_messenger	Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 …	NVD-CWE-Other	CVE-2004-1231	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304505	-	gadu-gadu	gadu-gadu_instant_messenger	Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename.	NVD-CWE-Other	CVE-2004-1232	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304506	-	gadu-gadu	gadu-gadu_instant_messenger	Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service (disk consumption) via a user packet to the DCC file transfer capability with an invalid file length.	NVD-CWE-Other	CVE-2004-1233	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304507	-	netscape	directory_server	Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2004-1236	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

304508	-	rarlab	winrar	WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, possibly causing an integer overflow that leads to…	NVD-CWE-Other	CVE-2004-1254	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304509	-	2fax	2fax	Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted to TIFF.	NVD-CWE-Other	CVE-2004-1255	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304510	-	abcmidi	abcmidi	Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.	NVD-CWE-Other	CVE-2004-1256	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed