Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2411	4.5	警告 Network	Hitachi Energy	Relion 670 ファームウェア Relion 650 ファームウェア	Hitachi Energy 製 Relion 670、650 および SAM600-IO Series におけるデータの信頼性確認が不十分な脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2022-3864	2026-02-5 14:30	2023-03-10	Show	GitHub Exploit DB Packet Storm

2412	7.5	重要 Network	Hitachi Energy	Relion 670 ファームウェア Relion 650 ファームウェア	Hitachi Energy 製 IEC 61850 MMS-Server におけるリソースの不適切なシャットダウンまたはリリースの脆弱性	CWE-404 リソースの不適切なシャットダウンおよびリリース	CVE-2022-3353	2026-02-5 14:29	2023-03-31	Show	GitHub Exploit DB Packet Storm

2413	4.7	警告 Network	web2py	web2py	web2pyにおけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2026-25198	2026-02-5 14:03	2026-02-5	Show	GitHub Exploit DB Packet Storm

2414	-	-	RISS SRL	MOMA Seismic Station	RISS SRL製MOMA Seismic Stationにおける重要な機能に対する認証の欠如の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-1632	2026-02-5 12:32	2026-02-4	Show	GitHub Exploit DB Packet Storm

2415	-	-	Avation	Avation Light Engine Pro	Avation Light Engine Proにおける重要な機能に対する認証の欠如の脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-1341	2026-02-5 12:32	2026-02-4	Show	GitHub Exploit DB Packet Storm

2416	7.5	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	D151 D301	Shenzhen Tenda Technology Co.,Ltd.のD151等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2021-47802	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2417	7.5	重要 Network	yodinfo	Mini Mouse	yodinfoのMini Mouseにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47849	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2418	7.5	重要 Network	yodinfo	Mini Mouse	yodinfoのMini Mouseにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47850	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2419	9.8	緊急 Network	yodinfo	Mini Mouse	yodinfoのMini MouseにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2021-47851	2026-02-4 18:42	2026-01-21	Show	GitHub Exploit DB Packet Storm

2420	7.5	重要 Network	クアルコム	MSM8608 ファームウェア APQ8017 ファームウェア qcn6224 ファームウェア Snapdragon 210 Processor Firmware fastconnect 7800 ファームウェア snapdragon 425 mobile …	クアルコムのQualcomm 205 Mobile Platform ファームウェア等の複数製品におけるバッファオーバーリードの脆弱性	CWE-126 バッファオーバーリード	CVE-2024-23358	2026-02-4 18:42	2024-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347891	-	fckeditor	fckeditor	Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files.	NVD-CWE-Other	CVE-2005-0613	2008-09-6 05:46	2005-02-28	Show	GitHub Exploit DB Packet Storm

347892	-	nexland symantec	pro800turbo firewall_vpn_appliance_200r gateway_security_360 gateway_security_460	The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, w…	NVD-CWE-Other	CVE-2005-0618	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347893	-	bfriendly.com	einstein	Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information.	NVD-CWE-Other	CVE-2005-0620	2008-09-6 05:46	2005-03-2	Show	GitHub Exploit DB Packet Storm

347894	-	trolltech	qt	Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execut…	NVD-CWE-Other	CVE-2005-0627	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347895	-	foxmail	foxmail_email_server	Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.	NVD-CWE-Other	CVE-2005-0635	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347896	-	foxmail	foxmail_email_server	Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.	NVD-CWE-Other	CVE-2005-0636	2008-09-6 05:46	2005-03-2	Show	GitHub Exploit DB Packet Storm

347897	-	xli altlinux suse	xli alt_linux suse_linux	Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer …	NVD-CWE-Other	CVE-2005-0639	2008-09-6 05:46	2005-03-2	Show	GitHub Exploit DB Packet Storm

347898	-	mcafee	antivirus_engine	Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of C…	NVD-CWE-Other	CVE-2005-0644	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347899	-	pixel-apes_group	safehtml	Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) "decimal HTML entities" or (2) "the \x00 symbol."	NVD-CWE-Other	CVE-2005-0648	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347900	-	pixel-apes_group	safehtml	Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."	NVD-CWE-Other	CVE-2005-0649	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed