Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2031 2.3 低
Local 		デル secure connect gateway デルのsecure connect gatewayにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2024-51539 2026-01-23 14:20 2025-02-25 Show GitHub Exploit DB Packet Storm
2032 7.5 重要
Network 		LlamaIndex LlamaIndex LlamaIndexにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2024-58339 2026-01-23 14:20 2026-01-12 Show GitHub Exploit DB Packet Storm
2033 7.5 重要
Network 		langchain langchain langchainにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2024-58340 2026-01-23 14:20 2026-01-12 Show GitHub Exploit DB Packet Storm
2034 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-11224 2026-01-23 14:20 2026-01-14 Show GitHub Exploit DB Packet Storm
2035 8.8 重要
Network 		ヒューレット・パッカード
ヒューレット・パッカード・エンタープライズ		 OMEN Gaming Hub
HP System Event Utility 		ヒューレット・パッカードのOMEN Gaming Hub等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-11531 2026-01-23 14:20 2025-12-9 Show GitHub Exploit DB Packet Storm
2036 6.5 警告
Network 		rymcu forest rymcuのforestにおける複数の脆弱性 CWE-862
CWE-862
CWE-863
CVE-2025-12924 2026-01-23 14:20 2025-11-10 Show GitHub Exploit DB Packet Storm
2037 9.8 緊急
Network 		rymcu forest rymcuのforestにおける複数の脆弱性 CWE-862
CWE-862
CWE-863
CVE-2025-12925 2026-01-23 14:20 2025-11-10 Show GitHub Exploit DB Packet Storm
2038 7.8 重要
Local 		SUPERAntiSpyware SUPERAntiSpyware SUPERAntiSpywareにおける危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開 		CVE-2025-14491 2026-01-23 14:20 2025-12-23 Show GitHub Exploit DB Packet Storm
2039 7.8 重要
Local 		huggingface transformers huggingfaceのtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-14920 2026-01-23 14:20 2025-12-23 Show GitHub Exploit DB Packet Storm
2040 7.8 重要
Local 		huggingface transformers huggingfaceのtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-14921 2026-01-23 14:19 2025-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315141 - microsoft outlook_express Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email. NVD-CWE-Other
CVE-2002-2202 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315142 - microsoft outlook_express This vulnerability affects Outlook Express 6.0 on any version of the Windows OS. NVD-CWE-Other
CVE-2002-2202 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315143 - redhat redhat_package_manager The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicio… NVD-CWE-Other
CVE-2002-2204 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315144 - redhat redhat_package_manager A large degree of social engineering and user interaction is neccessary to exploit this vulnerbility. NVD-CWE-Other
CVE-2002-2204 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315145 - webresolve webresolve Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname. NVD-CWE-Other
CVE-2002-2205 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315146 - symantec norton_antivirus The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries. NVD-CWE-Other
CVE-2002-2206 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315147 - eric_rescorla ssldump Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret. NVD-CWE-Other
CVE-2002-2207 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315148 - pablo_software_solutions baby_ftp_server Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors. NVD-CWE-Other
CVE-2002-2209 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315149 - openoffice openoffice The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file. NVD-CWE-Other
CVE-2002-2210 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
315150 - isc
fujitsu 		bind
uxp_v 		The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that … NVD-CWE-Other
CVE-2002-2212 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm