Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1761 5.3 警告
Network
アルバネットワークス株式会社 ArubaOS アルバネットワークス株式会社のArubaOSにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2025-37179 2026-01-26 19:38 2026-01-13 Show GitHub Exploit DB Packet Storm
1762 7.8 重要
Local
Linux
Debian
Linux Kernel
Debian GNU/Linux
Debian等の複数ベンダの製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-38702 2026-01-26 19:38 2025-09-4 Show GitHub Exploit DB Packet Storm
1763 5.5 警告
Local
Linux
Debian
Linux Kernel
Debian GNU/Linux
Debian等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2025-38706 2026-01-26 19:38 2025-09-4 Show GitHub Exploit DB Packet Storm
1764 5.5 警告
Local
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2025-39934 2026-01-26 19:37 2025-10-4 Show GitHub Exploit DB Packet Storm
1765 5.5 警告
Local
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2025-39938 2026-01-26 19:37 2025-10-4 Show GitHub Exploit DB Packet Storm
1766 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2025-39940 2026-01-26 19:37 2025-10-4 Show GitHub Exploit DB Packet Storm
1767 4.7 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける競合状態に関する脆弱性 CWE-362
競合状態
CVE-2025-39941 2026-01-26 19:37 2025-10-4 Show GitHub Exploit DB Packet Storm
1768 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2025-39945 2026-01-26 19:37 2025-10-4 Show GitHub Exploit DB Packet Storm
1769 5.5 警告
Local
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2025-39950 2026-01-26 19:37 2025-10-4 Show GitHub Exploit DB Packet Storm
1770 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2025-39951 2026-01-26 19:37 2025-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283051 - bruce_corkhill web_wiz_rich_text_editor Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame … NVD-CWE-Other
CVE-2007-3202 2018-10-17 01:47 2007-06-13 Show GitHub Exploit DB Packet Storm
283052 - hardened-php_project
php
hardened-php
subhosin
php
The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable name… NVD-CWE-Other
CVE-2007-3205 2018-10-17 01:47 2007-06-13 Show GitHub Exploit DB Packet Storm
283053 - phpmailer phpmailer PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php. NVD-CWE-Other
CVE-2007-3215 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm
283054 - phpmailer phpmailer Successful exploitation requires that the PHP script using PHPMailer is configured to send e-mails with the Sendmail method, and that the script does not sanitise data before storing it in the Sender… NVD-CWE-Other
CVE-2007-3215 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm
283055 - prototype_of_an_php_application prototype_of_an_php_application Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the path_inc parameter to (1) index.php in … NVD-CWE-Other
CVE-2007-3217 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm
283056 - simian_systems_inc sitellite_cms PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code… NVD-CWE-Other
CVE-2007-3228 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm
283057 - singapore image_gallery_web_application index.php in Singapore Gallery allows remote attackers to obtain sensitive information via a request with a non-directory gallery parameter, which reveals the path in an error message. NVD-CWE-Other
CVE-2007-3229 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm
283058 - wordpress wordpress Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATH_INFO (RE… NVD-CWE-Other
CVE-2007-3238 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm
283059 - wordpress wordpress Cross-site scripting (XSS) vulnerability in searchform.php in the AndyBlue theme before 20070607 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion … NVD-CWE-Other
CVE-2007-3239 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm
283060 - wordpress wordpress Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI) that accesses i… NVD-CWE-Other
CVE-2007-3240 2018-10-17 01:47 2007-06-15 Show GitHub Exploit DB Packet Storm