Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1761	5.3	警告 Network	アルバネットワークス株式会社	ArubaOS	アルバネットワークス株式会社のArubaOSにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2025-37179	2026-01-26 19:38	2026-01-13	Show	GitHub Exploit DB Packet Storm

1762	7.8	重要 Local	Linux Debian	Linux Kernel Debian GNU/Linux	Debian等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2025-38702	2026-01-26 19:38	2025-09-4	Show	GitHub Exploit DB Packet Storm

1763	5.5	警告 Local	Linux Debian	Linux Kernel Debian GNU/Linux	Debian等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-38706	2026-01-26 19:38	2025-09-4	Show	GitHub Exploit DB Packet Storm

1764	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-39934	2026-01-26 19:37	2025-10-4	Show	GitHub Exploit DB Packet Storm

1765	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-39938	2026-01-26 19:37	2025-10-4	Show	GitHub Exploit DB Packet Storm

1766	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2025-39940	2026-01-26 19:37	2025-10-4	Show	GitHub Exploit DB Packet Storm

1767	4.7	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2025-39941	2026-01-26 19:37	2025-10-4	Show	GitHub Exploit DB Packet Storm

1768	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-39945	2026-01-26 19:37	2025-10-4	Show	GitHub Exploit DB Packet Storm

1769	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2025-39950	2026-01-26 19:37	2025-10-4	Show	GitHub Exploit DB Packet Storm

1770	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-39951	2026-01-26 19:37	2025-10-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
283131	-	rational_software	hidden_administrator	Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors. NOTE: this issue …	NVD-CWE-Other	CVE-2007-2783	2018-10-17 01:45	2007-05-22	Show	GitHub Exploit DB Packet Storm

283132	-	esyndicat	esyndicat_pro	manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have other unspecified impact, via modified username, new_pass, new_pass2, status, sup…	NVD-CWE-Other	CVE-2007-2785	2018-10-17 01:45	2007-05-22	Show	GitHub Exploit DB Packet Storm

283133	-	vp-asp	vp-asp_shopping_cart	Cross-site scripting (XSS) vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the type parameter.	NVD-CWE-Other	CVE-2007-2790	2018-10-17 01:45	2007-05-22	Show	GitHub Exploit DB Packet Storm

283134	-	arris	cadant_c3_cmts	Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination) via a malformed IP packet with an invalid IP option.	NVD-CWE-Other	CVE-2007-2796	2018-10-17 01:45	2007-06-13	Show	GitHub Exploit DB Packet Storm

283135	-	xterm	xterm	xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals.	NVD-CWE-Other	CVE-2007-2797	2018-10-17 01:45	2007-08-28	Show	GitHub Exploit DB Packet Storm

283136	-	file sleuth_kit	file the_sleuth_kith	Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large fi…	CWE-189 Numeric Errors	CVE-2007-2799	2018-10-17 01:45	2007-05-24	Show	GitHub Exploit DB Packet Storm

283137	-	eticket	eticket	index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[], or (4) subject[] parameters, which reveals the installat…	NVD-CWE-Other	CVE-2007-2800	2018-10-17 01:45	2007-06-29	Show	GitHub Exploit DB Packet Storm

283138	-	eticket	eticket	Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (…	CWE-79 Cross-site Scripting	CVE-2007-2801	2018-10-17 01:45	2007-06-30	Show	GitHub Exploit DB Packet Storm

283139	-	hlstats	hlstats	Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the action p…	NVD-CWE-Other	CVE-2007-2812	2018-10-17 01:45	2007-05-23	Show	GitHub Exploit DB Packet Storm

283140	-	microsoft	internet_information_services	The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTL…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2007-2815	2018-10-17 01:45	2007-05-23	Show	GitHub Exploit DB Packet Storm