Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1521 5.5 警告
Local 		Debian
Linux		 Debian GNU/Linux
Linux Kernel 		Debian等の複数ベンダの製品における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2025-38503 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1522 5.5 警告
Local 		Debian
Linux		 Debian GNU/Linux
Linux Kernel 		Debian等の複数ベンダの製品における不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-38514 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1523 7.1 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2025-38521 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1524 5.5 警告
Local 		Debian
Linux		 Debian GNU/Linux
Linux Kernel 		Debian等の複数ベンダの製品における不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-38540 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1525 5.5 警告
Local 		Debian
Linux		 Debian GNU/Linux
Linux Kernel 		Debian等の複数ベンダの製品における不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-38560 2026-01-27 17:36 2025-08-19 Show GitHub Exploit DB Packet Storm
1526 7.1 重要
Local 		Debian
Linux		 Debian GNU/Linux
Linux Kernel 		Debian等の複数ベンダの製品における誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい 		CVE-2025-38670 2026-01-27 17:36 2025-08-22 Show GitHub Exploit DB Packet Storm
1527 5.5 警告
Local 		Debian
Linux		 Debian GNU/Linux
Linux Kernel 		Debian等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-38694 2026-01-27 17:36 2025-09-4 Show GitHub Exploit DB Packet Storm
1528 4.3 警告
Network 		ThemeGoods Grand Restaurant WordPress ThemeGoodsのWordPress用Grand Restaurant WordPressにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-39351 2026-01-27 17:35 2025-05-19 Show GitHub Exploit DB Packet Storm
1529 8.2 重要
Network 		ThemeGoods Grand Restaurant WordPress ThemeGoodsのWordPress用Grand Restaurant WordPressにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-39352 2026-01-27 17:35 2025-05-19 Show GitHub Exploit DB Packet Storm
1530 5.3 警告
Network 		ThemeGoods Grand Restaurant WordPress ThemeGoodsのWordPress用Grand Restaurant WordPressにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-39353 2026-01-27 17:35 2025-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282761 - webinsta cms PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templates_dir parameter. NVD-CWE-Other
CVE-2006-4196 2018-10-18 06:33 2006-08-18 Show GitHub Exploit DB Packet Storm
282762 - musicbrainz libmusicbrainz
libmusicbrainz_svn 		Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or e… NVD-CWE-Other
CVE-2006-4197 2018-10-18 06:33 2006-08-18 Show GitHub Exploit DB Packet Storm
282763 - wheatblog wheatblog PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in… NVD-CWE-Other
CVE-2006-4198 2018-10-18 06:33 2006-08-18 Show GitHub Exploit DB Packet Storm
282764 - wheatblog wheatblog Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2006-4198 2018-10-18 06:33 2006-08-18 Show GitHub Exploit DB Packet Storm
282765 - aspplayground.net aspplayground.net Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly other versions before October 15, 2006, allows remote attackers to inj… NVD-CWE-Other
CVE-2006-4206 2018-10-18 06:33 2006-08-18 Show GitHub Exploit DB Packet Storm
282766 - skippy.net wp-db_backup_plugin_for_wordpress Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary fi… NVD-CWE-Other
CVE-2006-4208 2018-10-18 06:33 2006-08-18 Show GitHub Exploit DB Packet Storm
282767 - skippy.net wp-db_backup_plugin_for_wordpress Apply patch NVD-CWE-Other
CVE-2006-4208 2018-10-18 06:33 2006-08-18 Show GitHub Exploit DB Packet Storm
282768 - ibm informix_dynamic_server IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared memory, which allows local users to obtain passwords by reading the memory (produc… NVD-CWE-Other
CVE-2006-3858 2018-10-18 06:32 2006-08-9 Show GitHub Exploit DB Packet Storm
282769 - ibm informix_dynamic_server This vulnerability is addressed in the following product releases: IBM, Informix IDS, 9.40 xC8 IBM, Informix IDS, 10.00 xC4 NVD-CWE-Other
CVE-2006-3858 2018-10-18 06:32 2006-08-9 Show GitHub Exploit DB Packet Storm
282770 - ibm informix_dynamic_database_server IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" comm… NVD-CWE-Other
CVE-2006-3859 2018-10-18 06:32 2006-08-17 Show GitHub Exploit DB Packet Storm