Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1591	4.3	警告 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-0887	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1592	5.3	警告 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-0888	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1593	5.4	警告 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-0890	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1594	8.1	重要 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-0891	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1595	9.8	緊急 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-0892	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1596	9.8	緊急 Network	シスコシステムズ	Cisco Unified Communications Manager IM and Presence Service Cisco Unity Connection Cisco Unified Communications Manager	シスコシステムズのCisco Unified Communications Manager等の複数製品におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-20045	2026-01-27 17:33	2026-01-21	Show	GitHub Exploit DB Packet Storm

1597	4.3	警告 Network	NetApp	ONTAP	NetAppのONTAPにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-22050	2026-01-27 17:33	2026-01-12	Show	GitHub Exploit DB Packet Storm

1598	9.8	緊急 Network	Docmost	Docmost	Docmostにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-22249	2026-01-27 17:33	2026-01-15	Show	GitHub Exploit DB Packet Storm

1599	9.8	緊急 Network	Tencent	WeKnora	TencentのWeKnoraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-22687	2026-01-27 17:33	2026-01-10	Show	GitHub Exploit DB Packet Storm

1600	8.8	重要 Network	Tencent	WeKnora	TencentのWeKnoraにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-22688	2026-01-27 17:32	2026-01-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
282841	-	adaptive_technology_resource_centre	atutor	SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.	NVD-CWE-Other	CVE-2006-3996	2018-10-18 06:32	2006-08-5	Show	GitHub Exploit DB Packet Storm

282842	-	adaptive_technology_resource_centre	atutor	Update to 1.5.3.2	NVD-CWE-Other	CVE-2006-3996	2018-10-18 06:32	2006-08-5	Show	GitHub Exploit DB Packet Storm

282843	-	wowroster	wowroster	PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir param…	NVD-CWE-Other	CVE-2006-3997	2018-10-18 06:32	2006-08-5	Show	GitHub Exploit DB Packet Storm

282844	-	iss	blackice_pc_protection	ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE …	NVD-CWE-Other	CVE-2006-3999	2018-10-18 06:32	2006-08-5	Show	GitHub Exploit DB Packet Storm

282845	-	barracuda_networks	barracuda_spam_firewall	Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot d…	NVD-CWE-Other	CVE-2006-4000	2018-10-18 06:32	2006-08-5	Show	GitHub Exploit DB Packet Storm

282846	-	barracuda_networks	barracuda_spam_firewall	Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mai…	NVD-CWE-Other	CVE-2006-4001	2018-10-18 06:32	2006-08-5	Show	GitHub Exploit DB Packet Storm

282847	-	hobbit_monitor	hobbit_monitor	The config method in Henrik Storner Hobbit monitor before 4.1.2p2 permits access to files outside of the intended configuration directory, which allows remote attackers to obtain sensitive informatio…	NVD-CWE-Other	CVE-2006-4003	2018-10-18 06:32	2006-08-8	Show	GitHub Exploit DB Packet Storm

282848	-	hobbit_monitor	hobbit_monitor	This vulnerability is addressed in the following product release: Hobbit Monitor, Hobbit Monitor, 4.1.2p2	NVD-CWE-Other	CVE-2006-4003	2018-10-18 06:32	2006-08-8	Show	GitHub Exploit DB Packet Storm

282849	-	knusperleicht	knusperleicht_guestbook	PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GB_PATH parameter.	NVD-CWE-Other	CVE-2006-4007	2018-10-18 06:32	2006-08-8	Show	GitHub Exploit DB Packet Storm

282850	-	knusperleicht	faq	PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the faq_path parameter.	NVD-CWE-Other	CVE-2006-4008	2018-10-18 06:32	2006-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed