Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1591	4.3	警告 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-0887	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1592	5.3	警告 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-0888	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1593	5.4	警告 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-0890	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1594	8.1	重要 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-0891	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1595	9.8	緊急 Network	Mozilla Foundation	Mozilla Thunderbird Mozilla Firefox	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-0892	2026-01-27 17:33	2026-01-13	Show	GitHub Exploit DB Packet Storm

1596	9.8	緊急 Network	シスコシステムズ	Cisco Unified Communications Manager IM and Presence Service Cisco Unity Connection Cisco Unified Communications Manager	シスコシステムズのCisco Unified Communications Manager等の複数製品におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-20045	2026-01-27 17:33	2026-01-21	Show	GitHub Exploit DB Packet Storm

1597	4.3	警告 Network	NetApp	ONTAP	NetAppのONTAPにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-22050	2026-01-27 17:33	2026-01-12	Show	GitHub Exploit DB Packet Storm

1598	9.8	緊急 Network	Docmost	Docmost	Docmostにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-22249	2026-01-27 17:33	2026-01-15	Show	GitHub Exploit DB Packet Storm

1599	9.8	緊急 Network	Tencent	WeKnora	TencentのWeKnoraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-22687	2026-01-27 17:33	2026-01-10	Show	GitHub Exploit DB Packet Storm

1600	8.8	重要 Network	Tencent	WeKnora	TencentのWeKnoraにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-22688	2026-01-27 17:32	2026-01-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314521	-	iatek	siteenable	SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.	NVD-CWE-Other	CVE-2005-1011	2008-09-6 05:47	2005-05-2	Show	GitHub Exploit DB Packet Storm

314522	-	mailenable	imapd	Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command.	NVD-CWE-Other	CVE-2005-1015	2008-09-6 05:47	2005-05-2	Show	GitHub Exploit DB Packet Storm

314523	-	f-secure	f-secure_anti-virus f-secure_internet_security f-secure_personal_express internet_gatekeeper	Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.	NVD-CWE-Other	CVE-2005-0350	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

314524	-	sco	openserver	Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-0351	2008-09-6 05:46	2005-04-7	Show	GitHub Exploit DB Packet Storm

314525	-	microsoft	log_sink_class_activex_control	The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.	NVD-CWE-Other	CVE-2005-0360	2008-09-6 05:46	2005-07-5	Show	GitHub Exploit DB Packet Storm

314526	-	awstats	awstats	awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.	NVD-CWE-Other	CVE-2005-0362	2008-09-6 05:46	2005-02-9	Show	GitHub Exploit DB Packet Storm

314527	-	awstats	awstats	awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.	NVD-CWE-Other	CVE-2005-0363	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

314528	-	mailreader.com	mailreader.com	Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext mess…	NVD-CWE-Other	CVE-2005-0386	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

314529	-	remstats	remstats	remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2005-0387	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

314530	-	remstats	remstats	Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."	NVD-CWE-Other	CVE-2005-0388	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed