Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1531	7.1	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2025-39760	2026-01-27 17:35	2025-09-11	Show	GitHub Exploit DB Packet Storm

1532	5.5	警告 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-39794	2026-01-27 17:35	2025-09-12	Show	GitHub Exploit DB Packet Storm

1533	5.5	警告 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における到達可能なアサーションに関する脆弱性	CWE-617 到達可能なアサーション	CVE-2025-39801	2026-01-27 17:35	2025-09-15	Show	GitHub Exploit DB Packet Storm

1534	5.5	警告 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-39838	2026-01-27 17:35	2025-09-19	Show	GitHub Exploit DB Packet Storm

1535	7.8	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-39866	2026-01-27 17:35	2025-09-19	Show	GitHub Exploit DB Packet Storm

1536	7.1	重要 Local	Debian Linux	Debian GNU/Linux Linux Kernel	Debian等の複数ベンダの製品における不特定の脆弱性	CWE-Other その他	CVE-2025-39891	2026-01-27 17:35	2025-10-1	Show	GitHub Exploit DB Packet Storm

1537	7.8	重要 Local	シーメンス	telecontrol server basic	シーメンスのtelecontrol server basicにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2025-40942	2026-01-27 17:35	2026-01-13	Show	GitHub Exploit DB Packet Storm

1538	9.6	緊急 Network	5ire	5ire	5ireにおける複数の脆弱性	CWE-20 CWE-79	CVE-2025-47777	2026-01-27 17:35	2025-05-14	Show	GitHub Exploit DB Packet Storm

1539	9.8	緊急 Network	Espressif Systems	ESP-IDF	Espressif SystemsのESP-IDFにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2025-52471	2026-01-27 17:35	2025-06-24	Show	GitHub Exploit DB Packet Storm

1540	7.3	重要 Network	xlplugins	nextmove	xlpluginsのWordPress用nextmoveにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-52735	2026-01-27 17:35	2025-10-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304411	-	midnight_commander debian gentoo redhat suse turbolinux	midnight_commander debian_linux linux enterprise_linux linux_advanced_workstation suse_linux turbolinux_server turbolinux_workstation	Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."	NVD-CWE-Other	CVE-2004-1093	2017-07-11 10:30	2005-04-14	Show	GitHub Exploit DB Packet Storm

304412	-	zgv debian	xzgv_image_viewer zgv_image_viewer debian_linux	Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in …	NVD-CWE-Other	CVE-2004-1095	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304413	-	cherokee	cherokee_httpd	Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (a…	NVD-CWE-Other	CVE-2004-1097	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304414	-	roaring_penguin mandrakesoft suse	mimedefang mandrake_linux mandrake_linux_corporate_server suse_linux	MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.	NVD-CWE-Other	CVE-2004-1098	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304415	-	tips	mailpost	Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTM…	NVD-CWE-Other	CVE-2004-1100	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304416	-	tips	mailpost	Successful exploitation requires that debug mode is enabled.	NVD-CWE-Other	CVE-2004-1100	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304417	-	tips	mailpost	mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error messag…	NVD-CWE-Other	CVE-2004-1101	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304418	-	tips	mailpost	MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.	NVD-CWE-Other	CVE-2004-1102	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304419	-	tips	mailpost	MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path …	NVD-CWE-Other	CVE-2004-1103	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

304420	-	nortel	contivity	Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.	NVD-CWE-Other	CVE-2004-1105	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed