Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1881 9.8 緊急
Network
HCL Technologies Limited HCL MyXalytics HCL Technologies LimitedのHCL MyXalyticsにおける暗号化処理のナンスおよび鍵ペアの再利用に関する脆弱性 CWE-323
暗号化処理のナンスおよび鍵ペアの再利用
CVE-2025-59870 2026-01-26 19:31 2026-01-16 Show GitHub Exploit DB Packet Storm
1882 8.6 重要
Network
ジュニパーネットワークス Juniper Space Security Director ジュニパーネットワークスのJuniper Space Security Directorにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-59968 2026-01-26 19:31 2025-10-9 Show GitHub Exploit DB Packet Storm
1883 8.4 重要
Network
ジュニパーネットワークス Juniper Space Security Director ジュニパーネットワークスのJuniper Space Security Directorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-59974 2026-01-26 19:31 2025-10-9 Show GitHub Exploit DB Packet Storm
1884 5.4 警告
Network
pH7Builder pH7 Social Dating Builder pH7BuilderのpH7 Social Dating Builderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-63644 2026-01-26 19:31 2026-01-14 Show GitHub Exploit DB Packet Storm
1885 5.4 警告
Network
Each Italy Wireless Mini Router WIRELESS-N 300M Firmware Each ItalyのWireless Mini Router WIRELESS-N 300M Firmwareにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-65349 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1886 7.3 重要
Local
Ludashi Ludashi Driver LudashiのLudashi Driverにおける複数の脆弱性 CWE-269
CWE-732
CVE-2025-67246 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1887 8.2 重要
Network
Mitel Networks Corporation Mitel CX
MiContact Center Business
Mitel Networks CorporationのMitel CX等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-67823 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1888 7.8 重要
Local
steelseries Nahimic SteelSeriesのNahimicにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2025-68921 2026-01-26 19:31 2026-01-16 Show GitHub Exploit DB Packet Storm
1889 8.2 重要
Network
GPAC GPAC GPACにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2025-70298 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1890 5.5 警告
Local
GPAC GPAC GPACにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2025-70302 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
181 - - - In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buffers batadv_tt_prepare_tvlv_global_data() builds the allocation length for a g… New - CVE-2026-31659 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
182 - - - In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: allocate rx skb before consuming bytes pn532_receive_buf() reports the number of accepted bytes to the serdev core. T… New - CVE-2026-31660 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
183 - - - In the Linux kernel, the following vulnerability has been resolved: tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG The GRP_ACK_MSG handler in tipc_group_proto_rcv() currently decrements bc_… New - CVE-2026-31662 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
184 - - - In the Linux kernel, the following vulnerability has been resolved: xfrm: hold dev ref until after transport_finish NF_HOOK After async crypto completes, xfrm_input_resume() calls dev_put() immedia… New - CVE-2026-31663 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
185 - - - In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: fix use-after-free in timeout object destroy nft_ct_timeout_obj_destroy() frees the timeout object with kfree(… New - CVE-2026-31665 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
186 - - - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref() After commit 1618aa3c2e01 ("btrfs: simplify ret… New - CVE-2026-31666 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
187 - - - In the Linux kernel, the following vulnerability has been resolved: Input: uinput - fix circular locking dependency with ff-core A lockdep circular locking dependency warning can be triggered repro… New - CVE-2026-31667 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
188 - - - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix slab-use-after-free in __inet_lookup_established The ehash table lookups are lockless and rely on SLAB_TYPESAFE_BY_RCU… New - CVE-2026-31669 2026-04-25 02:51 2026-04-25 Show GitHub Exploit DB Packet Storm
189 6.1 MEDIUM
Network
- - PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Versions prior to 8.5.10 do not escape `</style>` sequences when s… New CWE-79
Cross-site Scripting
CVE-2026-41305 2026-04-25 02:16 2026-04-24 Show GitHub Exploit DB Packet Storm
190 7.7 HIGH
Network
- - Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-2026-22039 fixed cross-namespace privilege escalation in Kyverno's `apiCall` context by validating t… New CWE-863
 Incorrect Authorization
CVE-2026-41068 2026-04-25 02:16 2026-04-24 Show GitHub Exploit DB Packet Storm