Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1991 6.5 警告
Network
Software AG Aris Software AGのArisにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2025-66838 2026-01-23 14:22 2026-01-7 Show GitHub Exploit DB Packet Storm
1992 8.2 重要
Network
WEM Project WEM WEM ProjectのWEMにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-22788 2026-01-23 14:22 2026-01-12 Show GitHub Exploit DB Packet Storm
1993 8.8 重要
Network
WEM Project WEM WEM ProjectのWEMにおける複数の脆弱性 CWE-434
CWE-434
CWE-616
CVE-2026-22789 2026-01-23 14:22 2026-01-12 Show GitHub Exploit DB Packet Storm
1994 8.8 重要
Network
Anomaly OpenCode AnomalyのOpenCodeにおける複数の脆弱性 CWE-306
CWE-749
CWE-942
CVE-2026-22812 2026-01-23 14:21 2026-01-12 Show GitHub Exploit DB Packet Storm
1995 6.1 警告
Network
Anomaly OpenCode AnomalyのOpenCodeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-22813 2026-01-23 14:21 2026-01-12 Show GitHub Exploit DB Packet Storm
1996 4.3 警告
Network
Teradek Slice ファームウェア TeradekのSlice ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2018-25155 2026-01-23 14:21 2025-12-24 Show GitHub Exploit DB Packet Storm
1997 4.3 警告
Network
Teradek Cube ファームウェア TeradekのCube ファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2018-25156 2026-01-23 14:21 2025-12-24 Show GitHub Exploit DB Packet Storm
1998 6.1 警告
Network
iWT FaceSentry Access Control System ファームウェア iWTのFaceSentry Access Control System ファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2019-25277 2026-01-23 14:21 2026-01-8 Show GitHub Exploit DB Packet Storm
1999 8.1 重要
Network
SpinetiX Fusion Digital Signage SpinetiXのFusion Digital Signageにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2020-36883 2026-01-23 14:21 2025-12-10 Show GitHub Exploit DB Packet Storm
2000 7.8 重要
Local
Flexense Ltd. DiskSavvy Flexense Ltd.のDiskSavvyにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2021-47805 2026-01-23 14:21 2026-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283551 - revolutionproducts flexbb SQL injection vulnerability in includes/start.php in Flexbb 1.0.0 10005 Beta Release 1 allows remote attackers to execute arbitrary SQL commands via the flexbb_lang_id COOKIE parameter to index.php. NVD-CWE-Other
CVE-2007-1729 2018-10-17 01:40 2007-03-28 Show GitHub Exploit DB Packet Storm
283552 - linux linux_kernel Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read kernel memory or cause a denial of serv… NVD-CWE-Other
CVE-2007-1730 2018-10-17 01:40 2007-03-28 Show GitHub Exploit DB Packet Storm
283553 - intervations navicopa_web_server Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (1) /cgi-bin/ or (2) /cgi/ pathname in an HTTP GET request, probably a different… NVD-CWE-Other
CVE-2007-1733 2018-10-17 01:40 2007-03-29 Show GitHub Exploit DB Packet Storm
283554 - linux linux_kernel The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds of the optlen value, which allows local users running on cert… NVD-CWE-Other
CVE-2007-1734 2018-10-17 01:40 2007-03-29 Show GitHub Exploit DB Packet Storm
283555 - corel wordperfect Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via a long printer selection (PRS) name in a Wordperfect docume… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-1735 2018-10-17 01:40 2007-03-29 Show GitHub Exploit DB Packet Storm
283556 - mozilla firefox Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection. NVD-CWE-Other
CVE-2007-1736 2018-10-17 01:40 2007-03-29 Show GitHub Exploit DB Packet Storm
283557 - opera opera_browser Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection. NVD-CWE-Other
CVE-2007-1737 2018-10-17 01:40 2007-03-29 Show GitHub Exploit DB Packet Storm
283558 - truecrypt_foundation truecrypt TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using… NVD-CWE-Other
CVE-2007-1738 2018-10-17 01:40 2007-03-29 Show GitHub Exploit DB Packet Storm
283559 - vmware workstation Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is shared, allows users on the guest system to write to arbitrary files on the host … NVD-CWE-Other
CVE-2007-1744 2018-10-17 01:40 2007-05-3 Show GitHub Exploit DB Packet Storm
283560 - vmware workstation Successful exploitation requires that a folder is shared. Although the "Shared Folders" feature is enabled by default, no folders are shared by default. NVD-CWE-Other
CVE-2007-1744 2018-10-17 01:40 2007-05-3 Show GitHub Exploit DB Packet Storm