Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-40553 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
132 9.8 緊急
Network 		SolarWinds Web Help Desk SolarWindsのWeb Help Deskにおける弱い認証に関する脆弱性 CWE-1390
脆弱な認証 		CVE-2025-40554 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
133 5.5 警告
Local 		Pure Storage, Inc. Portworx Pure Storage, Inc.のPortworxにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2025-9127 2026-02-5 15:51 2025-12-4 Show GitHub Exploit DB Packet Storm
134 6.5 警告
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2020-36968 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
135 8.8 重要
Network 		Tildeslash Ltd. M/Monit Tildeslash Ltd.のM/Monitにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2020-36969 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
136 9.8 緊急
Network 		Joakim Nygard and Jacob Oettinger Webgrind Webgrind projectのWebgrindにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2023-54339 2026-02-5 15:51 2026-01-13 Show GitHub Exploit DB Packet Storm
137 6.1 警告
Network 		Joakim Nygard and Jacob Oettinger Webgrind Webgrind projectのWebgrindにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2023-54341 2026-02-5 15:51 2026-01-13 Show GitHub Exploit DB Packet Storm
138 5.4 警告
Network 		tagify project tagify FactorialのTagifyにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-13983 2026-02-5 15:51 2026-01-28 Show GitHub Exploit DB Packet Storm
139 9.8 緊急
Network 		Petlibro, Inc. PETLIBRO Petlibro, Inc.のPETLIBROにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-15115 2026-02-5 15:50 2026-01-4 Show GitHub Exploit DB Packet Storm
140 7.5 重要
Network 		Redlib Redlib Redlibにおける複数の脆弱性 CWE-400
CWE-502
CVE-2025-30160 2026-02-5 15:50 2025-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307981 - nortel contivity
vpn_router_5000 		Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which al… NVD-CWE-Other
CVE-2007-2334 2011-03-8 11:54 2007-04-28 Show GitHub Exploit DB Packet Storm
307982 - nortel contivity
vpn_router_5000 		The vendor has addressed this issue with the following product update: http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=567877&RenditionID=&poid=null NVD-CWE-Other
CVE-2007-2334 2011-03-8 11:54 2007-04-28 Show GitHub Exploit DB Packet Storm
307983 - enterasys netsight_console
netsight_inventory_manager 		Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via cr… NVD-CWE-Other
CVE-2007-2343 2011-03-8 11:54 2007-04-28 Show GitHub Exploit DB Packet Storm
307984 - enterasys netsight_console
netsight_inventory_manager 		The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service (daemon crash) via a U… NVD-CWE-Other
CVE-2007-2344 2011-03-8 11:54 2007-04-28 Show GitHub Exploit DB Packet Storm
307985 - enterasys netsight_console
netsight_inventory_manager 		The vendor has addressed this issue with the following product updates: Apply Security Patch 1 : http://www.enterasys.com/products/management/downloads/security_and_patches/ Or upgrade to Ente… NVD-CWE-Other
CVE-2007-2344 2011-03-8 11:54 2007-04-28 Show GitHub Exploit DB Packet Storm
307986 - freepbx freepbx admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter. NVD-CWE-Other
CVE-2007-2350 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
307987 - symantec backupexec_system_recovery
livestate_recovery
norton_ghost
norton_save_and_recovery 		Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share cr… NVD-CWE-Other
CVE-2007-2360 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
307988 - symantec backupexec_system_recovery
livestate_recovery
norton_ghost
norton_save_and_recovery 		"In order for this exploit to have an impact, administrators would either have to configure client machines to save restore points images to a private share, or the vulnerable machine would have to b… NVD-CWE-Other
CVE-2007-2360 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
307989 - symantec enterprise_security_manager The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code … NVD-CWE-Other
CVE-2007-2375 2011-03-8 11:54 2007-05-1 Show GitHub Exploit DB Packet Storm
307990 - firefly firefly PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT paramete… NVD-CWE-Other
CVE-2007-2460 2011-03-8 11:54 2007-05-3 Show GitHub Exploit DB Packet Storm