Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1521 5.5 警告
Local
Debian
Linux
Debian GNU/Linux
Linux Kernel
Debian等の複数ベンダの製品における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション
CVE-2025-38503 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1522 5.5 警告
Local
Debian
Linux
Debian GNU/Linux
Linux Kernel
Debian等の複数ベンダの製品における不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-38514 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1523 7.1 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2025-38521 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1524 5.5 警告
Local
Debian
Linux
Debian GNU/Linux
Linux Kernel
Debian等の複数ベンダの製品における不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-38540 2026-01-27 17:36 2025-08-16 Show GitHub Exploit DB Packet Storm
1525 5.5 警告
Local
Debian
Linux
Debian GNU/Linux
Linux Kernel
Debian等の複数ベンダの製品における不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-38560 2026-01-27 17:36 2025-08-19 Show GitHub Exploit DB Packet Storm
1526 7.1 重要
Local
Debian
Linux
Debian GNU/Linux
Linux Kernel
Debian等の複数ベンダの製品における誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2025-38670 2026-01-27 17:36 2025-08-22 Show GitHub Exploit DB Packet Storm
1527 5.5 警告
Local
Debian
Linux
Debian GNU/Linux
Linux Kernel
Debian等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2025-38694 2026-01-27 17:36 2025-09-4 Show GitHub Exploit DB Packet Storm
1528 4.3 警告
Network
ThemeGoods Grand Restaurant WordPress ThemeGoodsのWordPress用Grand Restaurant WordPressにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2025-39351 2026-01-27 17:35 2025-05-19 Show GitHub Exploit DB Packet Storm
1529 8.2 重要
Network
ThemeGoods Grand Restaurant WordPress ThemeGoodsのWordPress用Grand Restaurant WordPressにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-39352 2026-01-27 17:35 2025-05-19 Show GitHub Exploit DB Packet Storm
1530 5.3 警告
Network
ThemeGoods Grand Restaurant WordPress ThemeGoodsのWordPress用Grand Restaurant WordPressにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-39353 2026-01-27 17:35 2025-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283411 - coolplayer coolplayer Multiple stack-based buffer overflows in the CPLI_ReadTag_OGG function in CPI_PlaylistItem.c in CoolPlayer 217 and earlier allow user-assisted remote attackers to execute arbitrary code via a long (1… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6609 2018-10-16 06:55 2008-01-1 Show GitHub Exploit DB Packet Storm
283412 - simpleforum simpleforum Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchkey parameter in a search act… CWE-79
Cross-site Scripting
CVE-2007-6616 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283413 - feng feng Multiple buffer overflows in the RTSP_valid_response_msg function in RTSP_state_machine.c in LScube Feng 0.1.15 and earlier allow remote attackers to execute arbitrary code via (1) a long first line … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6626 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283414 - feng feng Integer overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code … CWE-189
Numeric Errors
CVE-2007-6627 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283415 - feng feng LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via (1) a malformed Transport header, which triggers misparsing in parse_transp… NVD-CWE-Other
CVE-2007-6628 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283416 - feng feng Interpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a User-Agent header line that contains a carriag… NVD-CWE-Other
CVE-2007-6629 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283417 - feng feng The Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a malformed URI contain… NVD-CWE-Other
CVE-2007-6630 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283418 - lscube libnemesi Multiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to execute arbitrary code via (1) a reply that begins with a long version string, which triggers an overflow… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-6631 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283419 - netbizcity faqmasterflexplus Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php… CWE-79
Cross-site Scripting
CVE-2007-6633 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm
283420 - netbizcity faqmasterflexplus Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php, and unspecified o… CWE-89
SQL Injection
CVE-2007-6634 2018-10-16 06:55 2008-01-4 Show GitHub Exploit DB Packet Storm