Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1381 6.1 警告
Local 		Hitachi Energy microscada x sys600 Hitachi Energyのmicroscada x sys600における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-39201 2026-01-28 12:31 2025-06-24 Show GitHub Exploit DB Packet Storm
1382 8.1 重要
Network 		Hitachi Energy microscada x sys600 Hitachi Energyのmicroscada x sys600における権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2025-39202 2026-01-28 12:31 2025-06-24 Show GitHub Exploit DB Packet Storm
1383 6.5 警告
Network 		Hitachi Energy microscada x sys600 Hitachi Energyのmicroscada x sys600におけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2025-39203 2026-01-28 12:31 2025-06-24 Show GitHub Exploit DB Packet Storm
1384 6.5 警告
Network 		Hitachi Energy microscada x sys600 Hitachi Energyのmicroscada x sys600における情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-39204 2026-01-28 12:31 2025-06-24 Show GitHub Exploit DB Packet Storm
1385 7.8 重要
Local 		PDQ SmartDeploy PDQのSmartDeployにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2025-52094 2026-01-28 12:31 2025-08-22 Show GitHub Exploit DB Packet Storm
1386 9.8 緊急
Network 		PDQ SmartDeploy PDQのSmartDeployにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2025-52095 2026-01-28 12:31 2025-08-22 Show GitHub Exploit DB Packet Storm
1387 8.8 重要
Network 		aten eco DC atenのeco DCにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-6685 2026-01-28 12:31 2025-09-2 Show GitHub Exploit DB Packet Storm
1388 9.8 緊急
Network 		SmarterTools Inc. SmarterMail SmarterTools Inc.のSmarterMailにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-23760 2026-01-28 12:31 2026-01-22 Show GitHub Exploit DB Packet Storm
1389 7.6 重要
Network 		ヒューレット・パッカード CZ175A Firmware
CZ183A Firmware
CZ184A Firmware
CZ178A Firmware
CZ177A Firmware
CZ182A Firmware
CZ187A Firmware
CZ181A Firmware
CZ172A&… 		ヒューレット・パッカードのCZ172A Firmware等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-2301 2026-01-28 12:31 2024-05-23 Show GitHub Exploit DB Packet Storm
1390 4.8 警告
Network 		EnGenius Technologies EWS356-FIT Firmware EnGenius TechnologiesのEWS356-FIT Firmwareにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-31975 2026-01-28 12:31 2024-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283441 - anon_proxy_server anon_proxy_server Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and po… CWE-94
Code Injection 		CVE-2007-6459 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
283442 - mkportal mkportal SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery foto_show action. CWE-89
SQL Injection 		CVE-2007-6467 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
283443 - phpay phpay Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ (dot … CWE-22
Path Traversal 		CVE-2007-6471 2018-10-16 06:54 2007-12-20 Show GitHub Exploit DB Packet Storm
283444 - rosoftengineering rosoft_media_player Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-6478 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283445 - safenet sentinel_keys_server
sentinel_protection_server 		Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and possibly earlier versions, and Sentinel Keys Server 1.0.3 and possibly earlier versions, allows remote … CWE-22
Path Traversal 		CVE-2007-6483 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283446 - centreon centreon Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to (1) MakeXML.php o… CWE-94
Code Injection 		CVE-2007-6485 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283447 - kvaliitti webdoc_cms Multiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to execute arbitrary SQL commands via (1) the cat_id parameter to categories.asp; and probably (2) the docume… CWE-89
NVD-CWE-noinfo
SQL Injection 		CVE-2007-6491 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283448 - imesh.com imesh The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 cr… CWE-20
 Improper Input Validation  		CVE-2007-6492 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283449 - imesh.com imesh The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to … CWE-20
 Improper Input Validation  		CVE-2007-6493 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm
283450 - hosting_controller hosting_controller Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request… CWE-20
 Improper Input Validation  		CVE-2007-6494 2018-10-16 06:54 2007-12-21 Show GitHub Exploit DB Packet Storm