Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1881 9.8 緊急
Network 		HCL Technologies Limited HCL MyXalytics HCL Technologies LimitedのHCL MyXalyticsにおける暗号化処理のナンスおよび鍵ペアの再利用に関する脆弱性 CWE-323
暗号化処理のナンスおよび鍵ペアの再利用 		CVE-2025-59870 2026-01-26 19:31 2026-01-16 Show GitHub Exploit DB Packet Storm
1882 8.6 重要
Network 		ジュニパーネットワークス Juniper Space Security Director ジュニパーネットワークスのJuniper Space Security Directorにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-59968 2026-01-26 19:31 2025-10-9 Show GitHub Exploit DB Packet Storm
1883 8.4 重要
Network 		ジュニパーネットワークス Juniper Space Security Director ジュニパーネットワークスのJuniper Space Security Directorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-59974 2026-01-26 19:31 2025-10-9 Show GitHub Exploit DB Packet Storm
1884 5.4 警告
Network 		pH7Builder pH7 Social Dating Builder pH7BuilderのpH7 Social Dating Builderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-63644 2026-01-26 19:31 2026-01-14 Show GitHub Exploit DB Packet Storm
1885 5.4 警告
Network 		Each Italy Wireless Mini Router WIRELESS-N 300M Firmware Each ItalyのWireless Mini Router WIRELESS-N 300M Firmwareにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-65349 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1886 7.3 重要
Local 		Ludashi Ludashi Driver LudashiのLudashi Driverにおける複数の脆弱性 CWE-269
CWE-732
CVE-2025-67246 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1887 8.2 重要
Network 		Mitel Networks Corporation Mitel CX
MiContact Center Business 		Mitel Networks CorporationのMitel CX等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-67823 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1888 7.8 重要
Local 		steelseries Nahimic SteelSeriesのNahimicにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-68921 2026-01-26 19:31 2026-01-16 Show GitHub Exploit DB Packet Storm
1889 8.2 重要
Network 		GPAC GPAC GPACにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2025-70298 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1890 5.5 警告
Local 		GPAC GPAC GPACにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2025-70302 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283191 - acp3 acp3 Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via (1) the mode parameter to feeds.php, the (2) form[cat] parameter to (a) news/lis… NVD-CWE-Other
CVE-2007-2577 2018-10-17 01:44 2007-05-10 Show GitHub Exploit DB Packet Storm
283192 - acp3 acp3 Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the form[search_term] parame… NVD-CWE-Other
CVE-2007-2578 2018-10-17 01:44 2007-05-10 Show GitHub Exploit DB Packet Storm
283193 - acp3 acp3 Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via (1) the form[mail] parameter to contact/contact/index.php; the… NVD-CWE-Other
CVE-2007-2579 2018-10-17 01:44 2007-05-10 Show GitHub Exploit DB Packet Storm
283194 - apple safari Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an A… NVD-CWE-Other
CVE-2007-2580 2018-10-17 01:44 2007-05-10 Show GitHub Exploit DB Packet Storm
283195 - microsoft sharepoint_server
sharepoint_services
windows_2003 		Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary w… CWE-79
Cross-site Scripting 		CVE-2007-2581 2018-10-17 01:44 2007-05-10 Show GitHub Exploit DB Packet Storm
283196 - ibm db2 Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-2582 2018-10-17 01:44 2007-05-10 Show GitHub Exploit DB Packet Storm
283197 - nokia groupwise_mobile_server
intellisync_mobile_suite
intellisync_wireless_email_express 		Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user… CWE-200
Information Exposure 		CVE-2007-2590 2018-10-17 01:44 2007-05-11 Show GitHub Exploit DB Packet Storm
283198 - nokia groupwise_mobile_server
intellisync_mobile_suite
intellisync_wireless_email_express 		usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote a… NVD-CWE-Other
CVE-2007-2591 2018-10-17 01:44 2007-05-11 Show GitHub Exploit DB Packet Storm
283199 - nokia groupwise_mobile_server
intellisync_mobile_suite
intellisync_wireless_email_express 		Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireles… NVD-CWE-Other
CVE-2007-2592 2018-10-17 01:44 2007-05-11 Show GitHub Exploit DB Packet Storm
283200 - microsoft terminal_server The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly condu… NVD-CWE-Other
CVE-2007-2593 2018-10-17 01:44 2007-05-11 Show GitHub Exploit DB Packet Storm