Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1401	9.8	緊急 Network	Centreon	Centreon AWIE	CentreonのCentreon AWIEにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-15026	2026-01-28 12:30	2026-01-5	Show	GitHub Exploit DB Packet Storm

1402	6.8	警告 Adjacent	TP-LINK Technologies	Archer MR600	Archer MR600におけるOSコマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-14756	2026-01-28 09:58	2026-01-27	Show	GitHub Exploit DB Packet Storm

1403	9.8	緊急 Network	Sagemcom	F@ST 3686 Firmware	SagemcomのF@ST 3686 Firmwareにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2025-29329	2026-01-27 17:41	2026-01-12	Show	GitHub Exploit DB Packet Storm

1404	8.8	重要 Network	デル	data domain operating system powerprotect data domain PowerProtect DM5500 Firmware	デル等の複数ベンダの製品におけるアクセス制御の不十分な粒度に関する脆弱性	CWE-1220 CWE-Other	CVE-2025-29987	2026-01-27 17:41	2025-04-3	Show	GitHub Exploit DB Packet Storm

1405	8.1	重要 Network	ThemeGoods	Photography	ThemeGoodsのWordPress用Photographyにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-47579	2026-01-27 17:41	2025-09-9	Show	GitHub Exploit DB Packet Storm

1406	7.5	重要 Network	ThemeGoods	Photography	ThemeGoodsのWordPress用Photographyにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-47584	2026-01-27 17:41	2025-06-6	Show	GitHub Exploit DB Packet Storm

1407	6.5	警告 Network	XiaoLiuChu	pss.sale.com	XiaoLiuChuのpss.sale.comにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-51626	2026-01-27 17:41	2026-01-9	Show	GitHub Exploit DB Packet Storm

1408	9.8	緊急 Network	アドバンテック株式会社	IoT Edge Windows IoT Edge Linux docker IoTSuite Starter Linux docker IoTSuite Growth Linux docker IoTSuite/ SaaSComposer	アドバンテック株式会社のIoT Edge Linux docker等の複数製品におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-52694	2026-01-27 17:41	2026-01-12	Show	GitHub Exploit DB Packet Storm

1409	9.1	緊急 Network	OPTIMAL SYSTEMS GmbH	enaio	OPTIMAL SYSTEMS GmbHのenaioにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2025-56425	2026-01-27 17:41	2026-01-8	Show	GitHub Exploit DB Packet Storm

1410	7.5	重要 Network	QNAP Systems	Qfiling	QNAP SystemsのQfilingにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-59384	2026-01-27 17:40	2026-01-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304621	-	metamail_corporation sgi redhat	metamail propack enterprise_linux linux_advanced_workstation	Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2004-0104	2017-07-11 10:29	2004-03-3	Show	GitHub Exploit DB Packet Storm

304622	-	metamail_corporation sgi redhat	metamail propack enterprise_linux linux_advanced_workstation	Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2004-0105	2017-07-11 10:29	2004-03-3	Show	GitHub Exploit DB Packet Storm

304623	-	freebsd	freebsd	The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the …	NVD-CWE-Other	CVE-2004-0125	2017-07-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

304624	-	phpgedview	phpgedview	Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (do…	NVD-CWE-Other	CVE-2004-0127	2017-07-11 10:29	2004-03-3	Show	GitHub Exploit DB Packet Storm

304625	-	phpgedview	phpgedview	login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, w…	NVD-CWE-Other	CVE-2004-0130	2017-07-11 10:29	2004-03-3	Show	GitHub Exploit DB Packet Storm

304626	-	visualshapers	ezcontents	Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS…	NVD-CWE-Other	CVE-2004-0132	2017-07-11 10:29	2004-03-3	Show	GitHub Exploit DB Packet Storm

304627	-	linux	linux_kernel	The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by r…	NVD-CWE-Other	CVE-2004-0133	2017-07-11 10:29	2004-06-1	Show	GitHub Exploit DB Packet Storm

304628	-	-	-	cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process.	NVD-CWE-Other	CVE-2004-0134	2017-07-11 10:29	2004-08-18	Show	GitHub Exploit DB Packet Storm

304629	-	sgi	irix	The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory.	NVD-CWE-Other	CVE-2004-0135	2017-07-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

304630	-	sgi	irix	The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary."	NVD-CWE-Other	CVE-2004-0136	2017-07-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed