Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
151 7.5 重要
Network 		JustDoIt0910 tinyMQTT JustDoIt0910のtinyMQTTにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2025-56353 2026-02-5 15:50 2026-01-20 Show GitHub Exploit DB Packet Storm
152 5.4 警告
Network 		School Management System PHP Project School Management System PHP School Management System PHP ProjectのSchool Management System PHPにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-63443 2026-02-5 15:50 2025-11-3 Show GitHub Exploit DB Packet Storm
153 9.8 緊急
Network 		opensagres XDocReport opensagresのXDocReportにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 		CVE-2025-64087 2026-02-5 15:50 2026-01-20 Show GitHub Exploit DB Packet Storm
154 8.8 重要
Network 		ajax file browser File Browserにおける複数の脆弱性 CWE-285
CWE-639
CWE-639
CVE-2025-64523 2026-02-5 15:50 2025-11-12 Show GitHub Exploit DB Packet Storm
155 6.1 警告
Physics 		Blurams Dome Flare Firmware BluramsのDome Flare Firmwareにおける複数の脆弱性 CWE-119
CWE-125
CWE-1274
CVE-2025-65396 2026-02-5 15:50 2026-01-14 Show GitHub Exploit DB Packet Storm
156 6.8 警告
Physics 		Blurams Dome Flare Firmware BluramsのDome Flare Firmwareにおける複数の脆弱性 CWE-20
CWE-287
CVE-2025-65397 2026-02-5 15:50 2026-01-14 Show GitHub Exploit DB Packet Storm
157 9.8 緊急
Network 		opensagres XDocReport opensagresのXDocReportにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2025-65482 2026-02-5 15:50 2026-01-20 Show GitHub Exploit DB Packet Storm
158 5.3 警告
Network 		pymdown extensions project pymdown extensions facelessuserのPyMdown Extensionsにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2025-68142 2026-02-5 15:50 2025-12-16 Show GitHub Exploit DB Packet Storm
159 9.8 緊急
Network 		code-projects Computer Book Store carmelo (Carmelo Garcia)のComputer Book Storeにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2025-69559 2026-02-5 15:50 2026-01-27 Show GitHub Exploit DB Packet Storm
160 6.5 警告
Network 		TMS Global Software TMS Management Console TMS Global SoftwareのTMS Management Consoleにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-69612 2026-02-5 15:50 2026-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307821 - ingate firewall
ingate_siparator 		The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios, which allows remote attackers to caus… CWE-399
 Resource Management Errors 		CVE-2008-0263 2011-03-8 12:04 2008-01-16 Show GitHub Exploit DB Packet Storm
307822 - symantec scan_engine
symantec_antivirus_clearswift
symantec_antivirus_filtering_domino_mpe
symantec_antivirus_messaging
symantec_antivirus_microsoft_sharepoint
symantec_antivirus_ms_isa
syma… 		Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memo… CWE-399
 Resource Management Errors 		CVE-2008-0308 2011-03-8 12:04 2008-02-29 Show GitHub Exploit DB Packet Storm
307823 - symantec scan_engine
symantec_antivirus_filtering_domino_mpe
symantec_antivirus_network_attached_storage
symantec_antivirus_scan_engine
symantec_antivirus_scan_engine_caching
symantec_antivirus… 		Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-0309 2011-03-8 12:04 2008-02-29 Show GitHub Exploit DB Packet Storm
307824 - modern
singapore 		modern
singapore 		Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to defa… CWE-79
Cross-site Scripting 		CVE-2008-0400 2011-03-8 12:04 2008-01-23 Show GitHub Exploit DB Packet Storm
307825 - hal_networks perl__cgi_cart
php_cart
shop_hal_v1 		Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2008-0522 2011-03-8 12:04 2008-02-1 Show GitHub Exploit DB Packet Storm
307826 - drupal secure_site_module Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attackers to gain the privileges of a user who has authenticated fr… NVD-CWE-noinfo
CVE-2008-0568 2011-03-8 12:04 2008-02-5 Show GitHub Exploit DB Packet Storm
307827 - drupal comment_upload_module The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0569 2011-03-8 12:04 2008-02-5 Show GitHub Exploit DB Packet Storm
307828 - drupal openid The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domain… CWE-20
 Improper Input Validation  		CVE-2008-0570 2011-03-8 12:04 2008-02-5 Show GitHub Exploit DB Packet Storm
307829 - drupal userpoints_module The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does not follow Drupal's Forms API submission model, which allows… CWE-352
 Origin Validation Error 		CVE-2008-0571 2011-03-8 12:04 2008-02-5 Show GitHub Exploit DB Packet Storm
307830 - drupal project_issue_tracking_module Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in th… CWE-79
Cross-site Scripting 		CVE-2008-0576 2011-03-8 12:04 2008-02-5 Show GitHub Exploit DB Packet Storm