Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1961	6.5	警告 Network	Wireshark	Wireshark	Wiresharkにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-0962	2026-01-23 14:23	2026-01-14	Show	GitHub Exploit DB Packet Storm

1962	7.2	重要 Network	Open eClass project	Open eClass	Open eClassにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2026-22241	2026-01-23 14:23	2026-01-8	Show	GitHub Exploit DB Packet Storm

1963	8.8	重要 Network	Microhard	IPn4G Firmware IPn3Gii Firmware VIP4Gb Firmware BulletLTE ファームウェア IPn4Gb Firmware Dragon-LTE Firmware Bullet-3G Firmware VIP4G-WiFi-N Firm…	MicrohardのBullet-3G Firmware等の複数製品における不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2018-25148	2026-01-23 14:23	2025-12-24	Show	GitHub Exploit DB Packet Storm

1964	6.5	警告 Network	Microhard	IPn4G Firmware IPn3Gii Firmware VIP4Gb Firmware BulletLTE ファームウェア IPn4Gb Firmware Dragon-LTE Firmware Bullet-3G Firmware VIP4G-WiFi-N Firm…	MicrohardのBullet-3G Firmware等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2018-25149	2026-01-23 14:23	2025-12-24	Show	GitHub Exploit DB Packet Storm

1965	6.5	警告 Network	Teradek	Vidiu Pro Firmware VidiU Mini ファームウェア VidiU ファームウェア	TeradekのVidiU Mini ファームウェア等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2019-25251	2026-01-23 14:23	2025-12-24	Show	GitHub Exploit DB Packet Storm

1966	4.3	警告 Network	Teradek	Vidiu Pro Firmware VidiU Mini ファームウェア VidiU ファームウェア	TeradekのVidiU Mini ファームウェア等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2019-25252	2026-01-23 14:23	2025-12-24	Show	GitHub Exploit DB Packet Storm

1967	5.5	警告 Local	Celestial Software	AbsoluteTelnet	Celestial SoftwareのAbsoluteTelnetにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-47764	2026-01-23 14:23	2026-01-15	Show	GitHub Exploit DB Packet Storm

1968	5.5	警告 Local	Celestial Software	AbsoluteTelnet	Celestial SoftwareのAbsoluteTelnetにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2021-47765	2026-01-23 14:23	2026-01-15	Show	GitHub Exploit DB Packet Storm

1969	7.8	重要 Local	Macro Expert	Macro Expert	Macro Expertにおける引用されない検索パスまたは要素に関する脆弱性	CWE-428 引用されない検索パスまたは要素	CVE-2021-47780	2026-01-23 14:23	2026-01-16	Show	GitHub Exploit DB Packet Storm

1970	8.8	重要 Network	Zesle Software Inc.	ZesleCP	Zesle Software Inc.のZesleCPにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2021-47794	2026-01-23 14:22	2026-01-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304601	-	mantis	mantis	Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup…	NVD-CWE-Other	CVE-2004-1730	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304602	-	mantis	mantis	signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.	NVD-CWE-Other	CVE-2004-1731	2017-07-11 10:31	2004-08-20	Show	GitHub Exploit DB Packet Storm

304603	-	mydms	mydms	SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.	NVD-CWE-Other	CVE-2004-1732	2017-07-11 10:31	2004-08-20	Show	GitHub Exploit DB Packet Storm

304604	-	mydms	mydms	This was fixed in version 1.4.2.	NVD-CWE-Other	CVE-2004-1732	2017-07-11 10:31	2004-08-20	Show	GitHub Exploit DB Packet Storm

304605	-	mydms	mydms	Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.	NVD-CWE-Other	CVE-2004-1733	2017-07-11 10:31	2004-08-20	Show	GitHub Exploit DB Packet Storm

304606	-	mantis	mantis	PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the (1) t_core_path parameter to bug_api.php or (2) t_core_dir parameter t…	NVD-CWE-Other	CVE-2004-1734	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304607	-	sympa	sympa	Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.	NVD-CWE-Other	CVE-2004-1735	2017-07-11 10:31	2004-08-21	Show	GitHub Exploit DB Packet Storm

304608	-	the_cacti_group	cacti	Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the…	NVD-CWE-Other	CVE-2004-1736	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304609	-	the_cacti_group gentoo	cacti linux	SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.	NVD-CWE-Other	CVE-2004-1737	2017-07-11 10:31	2004-08-16	Show	GitHub Exploit DB Packet Storm

304610	-	jshop_e-commerce	jshop_server	Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter.	NVD-CWE-Other	CVE-2004-1738	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed