Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1881 9.8 緊急
Network 		HCL Technologies Limited HCL MyXalytics HCL Technologies LimitedのHCL MyXalyticsにおける暗号化処理のナンスおよび鍵ペアの再利用に関する脆弱性 CWE-323
暗号化処理のナンスおよび鍵ペアの再利用 		CVE-2025-59870 2026-01-26 19:31 2026-01-16 Show GitHub Exploit DB Packet Storm
1882 8.6 重要
Network 		ジュニパーネットワークス Juniper Space Security Director ジュニパーネットワークスのJuniper Space Security Directorにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-59968 2026-01-26 19:31 2025-10-9 Show GitHub Exploit DB Packet Storm
1883 8.4 重要
Network 		ジュニパーネットワークス Juniper Space Security Director ジュニパーネットワークスのJuniper Space Security Directorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-59974 2026-01-26 19:31 2025-10-9 Show GitHub Exploit DB Packet Storm
1884 5.4 警告
Network 		pH7Builder pH7 Social Dating Builder pH7BuilderのpH7 Social Dating Builderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-63644 2026-01-26 19:31 2026-01-14 Show GitHub Exploit DB Packet Storm
1885 5.4 警告
Network 		Each Italy Wireless Mini Router WIRELESS-N 300M Firmware Each ItalyのWireless Mini Router WIRELESS-N 300M Firmwareにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-65349 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1886 7.3 重要
Local 		Ludashi Ludashi Driver LudashiのLudashi Driverにおける複数の脆弱性 CWE-269
CWE-732
CVE-2025-67246 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1887 8.2 重要
Network 		Mitel Networks Corporation Mitel CX
MiContact Center Business 		Mitel Networks CorporationのMitel CX等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-67823 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1888 7.8 重要
Local 		steelseries Nahimic SteelSeriesのNahimicにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-68921 2026-01-26 19:31 2026-01-16 Show GitHub Exploit DB Packet Storm
1889 8.2 重要
Network 		GPAC GPAC GPACにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2025-70298 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
1890 5.5 警告
Local 		GPAC GPAC GPACにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2025-70302 2026-01-26 19:31 2026-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283371 - sonicbb sonicbb SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] parameter to viewforum.php, and the (3) id parameter to (a) viewforum.php or (b) … NVD-CWE-Other
CVE-2007-1901 2018-10-17 01:41 2007-05-15 Show GitHub Exploit DB Packet Storm
283372 - sonicbb sonicbb Successful exploitation requires that "magic_quotes_gpc" is disabled. NVD-CWE-Other
CVE-2007-1901 2018-10-17 01:41 2007-05-15 Show GitHub Exploit DB Packet Storm
283373 - sonicbb sonicbb Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b)… NVD-CWE-Other
CVE-2007-1902 2018-10-17 01:41 2007-05-15 Show GitHub Exploit DB Packet Storm
283374 - sonicbb sonicbb Successful exploitation requires that "magic_quotes_gpc" is disabled. NVD-CWE-Other
CVE-2007-1902 2018-10-17 01:41 2007-05-15 Show GitHub Exploit DB Packet Storm
283375 - sonicbb sonicbb Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter. NVD-CWE-Other
CVE-2007-1903 2018-10-17 01:41 2007-05-15 Show GitHub Exploit DB Packet Storm
283376 - sonicbb sonicbb Successful exploitation requires that "magic_quotes_gpc" is disabled. NVD-CWE-Other
CVE-2007-1903 2018-10-17 01:41 2007-05-15 Show GitHub Exploit DB Packet Storm
283377 - ecardmax.com
mybb 		hot_editor
mybb_hot_editor_plugin 		Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local fi… NVD-CWE-Other
CVE-2007-1906 2018-10-17 01:41 2007-04-11 Show GitHub Exploit DB Packet Storm
283378 - sap rfc_library The RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information (external RFC server configuration data) via unspecified ve… NVD-CWE-Other
CVE-2007-1914 2018-10-17 01:41 2007-04-11 Show GitHub Exploit DB Packet Storm
283379 - arizona-dream livre_d_or_livor Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2007-1919 2018-10-17 01:41 2007-04-11 Show GitHub Exploit DB Packet Storm
283380 - nullsoft winamp LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that contains a value that is used as an off… NVD-CWE-Other
CVE-2007-1921 2018-10-17 01:41 2007-04-11 Show GitHub Exploit DB Packet Storm