Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232971 4.3 警告 MPlayer project - MPlayer におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2007-6718 2012-09-25 16:59 2008-10-20 Show GitHub Exploit DB Packet Storm
232972 4.3 警告 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2007-6715 2012-09-25 16:59 2008-04-17 Show GitHub Exploit DB Packet Storm
232973 7.5 危険 シスコシステムズ (Linksys) - Cisco Linksys WAG54GS Wireless-G ADSL Gateway におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6709 2012-09-25 16:59 2008-03-13 Show GitHub Exploit DB Packet Storm
232974 4.3 警告 シスコシステムズ (Linksys) - Cisco Linksys WAG54GS Wireless-G ADSL Gateway におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-6708 2012-09-25 16:59 2008-03-13 Show GitHub Exploit DB Packet Storm
232975 4.3 警告 シスコシステムズ (Linksys) - Cisco Linksys WAG54GS Wireless-G ADSL Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6707 2012-09-25 16:59 2008-03-13 Show GitHub Exploit DB Packet Storm
232976 4.3 警告 OpenBSD - OpenBSD の BGPD デーモン用の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-6700 2012-09-25 16:59 2008-02-4 Show GitHub Exploit DB Packet Storm
232977 7.5 危険 max kervin - KerviNet Forum の topic.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-6727 2012-09-25 16:59 2007-04-18 Show GitHub Exploit DB Packet Storm
232978 3.3 注意 IBM - WebSphere MQ クライアントにおける任意のハンドルを複製される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-6705 2012-09-25 16:59 2007-07-27 Show GitHub Exploit DB Packet Storm
232979 10 危険 Novell - Novell Client の Spooler サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6701 2012-09-25 16:59 2007-07-26 Show GitHub Exploit DB Packet Storm
232980 10 危険 Bharat Mediratta - Menalto Gallery の WebCam モジュールにおける脆弱性 CWE-noinfo
情報不足
CVE-2007-6693 2012-09-25 16:59 2007-12-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2001 7.4 HIGH
Network
- - In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funk… CWE-444
HTTP Request Smuggling
CVE-2026-2332 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
2002 7.1 HIGH
Network
- - A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Mana… CWE-305
 Authentication Bypass by Primary Weakness
CVE-2026-33892 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
2003 - - - Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execut… CWE-88
Argument Injection
CVE-2026-2449 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
2004 - - - .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant… CWE-520
 .NET Misconfiguration: Use of Impersonation
CVE-2026-2450 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
2005 - - - A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer proce… CWE-552
 Files or Directories Accessible to External Parties
CVE-2025-7389 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
2006 - - - The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.  It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applicatio… CWE-257
 Storing Passwords in a Recoverable Format
CVE-2025-8095 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
2007 9.8 CRITICAL
Network
- - An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2026-31049 2026-04-18 00:24 2026-04-14 Show GitHub Exploit DB Packet Storm
2008 9.8 CRITICAL
Network
- - A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a us… CWE-94
Code Injection
CVE-2025-61260 2026-04-18 00:24 2026-04-15 Show GitHub Exploit DB Packet Storm
2009 4.6 MEDIUM
Physics
- - A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0 … CWE-385
 Covert Timing Channel
CVE-2025-69893 2026-04-18 00:24 2026-04-15 Show GitHub Exploit DB Packet Storm
2010 6.5 MEDIUM
Network
- - A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesyst… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
CVE-2026-30480 2026-04-18 00:24 2026-04-15 Show GitHub Exploit DB Packet Storm