Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 27, 2026, 8:58 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1851	7.6	重要 Network	Shopify	Remix React Router	ShopifyのReact Router等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-59057	2026-02-2 19:31	2026-01-10	Show	GitHub Exploit DB Packet Storm

1852	8.1	重要 Network	ThemeMove	Medizin	ThemeMoveのWordPress用MedizinにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-59555	2026-02-2 19:31	2025-10-22	Show	GitHub Exploit DB Packet Storm

1853	8.1	重要 Network	ThemeMove	Billey	ThemeMoveのWordPress用BilleyにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-59558	2026-02-2 19:31	2025-10-22	Show	GitHub Exploit DB Packet Storm

1854	8.1	重要 Network	ThemeMove	EduMall	ThemeMoveのWordPress用EduMallにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-59564	2026-02-2 19:31	2025-10-22	Show	GitHub Exploit DB Packet Storm

1855	8.1	重要 Network	ThemeMove	Minimogwp	ThemeMoveのWordPress用MinimogwpにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-60069	2026-02-2 19:31	2025-12-18	Show	GitHub Exploit DB Packet Storm

1856	10	緊急 Network	GongRzhe	Terminal Controller for MCP	GongRzheのTerminal Controller for MCPにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2025-61492	2026-02-2 19:31	2026-01-7	Show	GitHub Exploit DB Packet Storm

1857	7.5	重要 Network	wpwebelite	Follow My Blog Post	WPWeb EliteのWordPress用Follow My Blog Postにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2025-64258	2026-02-2 19:31	2025-12-18	Show	GitHub Exploit DB Packet Storm

1858	5.4	警告 Network	Qode Interactive	Bard	Qode InteractiveのWordPress用Bardにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2025-64368	2026-02-2 19:31	2025-10-31	Show	GitHub Exploit DB Packet Storm

1859	5.3	警告 Network	XWiki	Full Calendar Macro (macro-fullcalendar-pom)	XWikiのFull Calendar Macro (macro-fullcalendar-pom)における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2025-65090	2026-02-2 19:31	2026-01-10	Show	GitHub Exploit DB Packet Storm

1860	10	緊急 Network	XWiki	Full Calendar Macro (macro-fullcalendar-pom)	XWikiのFull Calendar Macro (macro-fullcalendar-pom)におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-65091	2026-02-2 19:31	2026-01-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348621	-	bardon_data_systems	winu	WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges.	NVD-CWE-Other	CVE-2000-0789	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

348622	-	trustix	secure_linux	Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.	NVD-CWE-Other	CVE-2000-0791	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

348623	-	alan_cox	gnome-lokkit	Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available.	NVD-CWE-Other	CVE-2000-0792	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

348624	-	hp	hp-ux	Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.	NVD-CWE-Other	CVE-2000-0801	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

348625	-	fastream	ftp\+\+_server	Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.	NVD-CWE-Other	CVE-2000-0831	2008-09-6 05:21	2000-11-14	Show	GitHub Exploit DB Packet Storm

348626	-	sco	openserver	snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.	NVD-CWE-Other	CVE-2000-0147	2008-09-6 05:20	2000-02-8	Show	GitHub Exploit DB Packet Storm

348627	-	realnetworks	realplayer	Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.	NVD-CWE-Other	CVE-2000-0280	2008-09-6 05:20	2000-04-3	Show	GitHub Exploit DB Packet Storm

348628	-	napster	napster_client	Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.	NVD-CWE-Other	CVE-2000-0281	2008-09-6 05:20	2000-03-26	Show	GitHub Exploit DB Packet Storm

348629	-	sco	open_desktop openserver unixware	Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.	NVD-CWE-Other	CVE-2000-0307	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

348630	-	netscape sco	enterprise_server fasttrack_server proxy_server unixware	Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.	NVD-CWE-Other	CVE-2000-0308	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed