Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232961 4.3 警告 Moodle - Moodle の install.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0123 2012-09-25 16:59 2008-01-11 Show GitHub Exploit DB Packet Storm
232962 6.8 警告 myphp forum - MyPHP Forum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0099 2012-09-25 16:59 2008-01-7 Show GitHub Exploit DB Packet Storm
232963 6.4 警告 MODX - MODx Content Management System におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0094 2012-09-25 16:59 2008-01-7 Show GitHub Exploit DB Packet Storm
232964 4.6 警告 orb networks - Orb Networks Orb などにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2008-0070 2012-09-25 16:59 2008-03-31 Show GitHub Exploit DB Packet Storm
232965 5 警告 ヒューレット・パッカード - HP OV NNM の OpenView5.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0068 2012-09-25 16:59 2008-04-16 Show GitHub Exploit DB Packet Storm
232966 5 警告 MaraDNS - MaraDNS におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-0061 2012-09-25 16:59 2008-01-3 Show GitHub Exploit DB Packet Storm
232967 7.5 危険 Novell - Novell NetWare の FTP server におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6735 2012-09-25 16:59 2008-02-14 Show GitHub Exploit DB Packet Storm
232968 4 警告 Novell - Novell NetWare の FTP server におけるホームサーバの外部からディレクトリへアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6734 2012-09-25 16:59 2008-02-14 Show GitHub Exploit DB Packet Storm
232969 4.7 警告 Linux - Linux kernel の fs/nfs/file.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-6733 2012-09-25 16:59 2007-04-28 Show GitHub Exploit DB Packet Storm
232970 7.5 危険 inspector it - Wiz-Ad における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6719 2012-09-25 16:59 2008-12-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1931 - - - MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the n… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-13822 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1932 5.4 MEDIUM
Network 		- - Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, and Kiuwan SAST on-pr… CWE-863
 Incorrect Authorization 		CVE-2026-24069 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1933 7.4 HIGH
Network 		- - In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funk… CWE-444
HTTP Request Smuggling 		CVE-2026-2332 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1934 7.1 HIGH
Network 		- - A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Mana… CWE-305
 Authentication Bypass by Primary Weakness 		CVE-2026-33892 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1935 - - - Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execut… CWE-88
Argument Injection 		CVE-2026-2449 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1936 - - - .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant… CWE-520
 .NET Misconfiguration: Use of Impersonation 		CVE-2026-2450 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1937 - - - A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer proce… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2025-7389 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1938 - - - The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.  It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applicatio… CWE-257
 Storing Passwords in a Recoverable Format 		CVE-2025-8095 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1939 9.8 CRITICAL
Network 		- - An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2026-31049 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
1940 9.8 CRITICAL
Network 		- - A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a us… CWE-94
Code Injection 		CVE-2025-61260 2026-04-18 00:24 2026-04-15 Show GitHub Exploit DB Packet Storm