Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251 5.3 警告
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-55132 2026-02-5 15:46 2026-01-20 Show GitHub Exploit DB Packet Storm
252 7.5 重要
Network 		OwnTone project OwnTone OwnTone projectのOwnToneにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-57155 2026-02-5 15:46 2026-01-20 Show GitHub Exploit DB Packet Storm
253 6.5 警告
Network 		Engineering Ingegneria Informatica knowage Engineering Ingegneria Informaticaのknowageにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-58441 2026-02-5 15:46 2026-01-7 Show GitHub Exploit DB Packet Storm
254 8.7 重要
Network 		Ultimate Fosters Ultimate POS Ultimate FostersのUltimate POSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-60503 2026-02-5 15:46 2025-11-3 Show GitHub Exploit DB Packet Storm
255 5.3 警告
Network 		The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-61730 2026-02-5 15:46 2026-01-28 Show GitHub Exploit DB Packet Storm
256 4.3 警告
Network 		webinarpress webinarpress WordPress用webinarpressにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-62972 2026-02-5 15:45 2025-10-27 Show GitHub Exploit DB Packet Storm
257 7.5 重要
Network 		oneflow oneflow oneflowにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-65886 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
258 6.5 警告
Network 		oneflow oneflow oneflowにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2025-65887 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
259 7.5 重要
Network 		oneflow oneflow oneflowにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-65888 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
260 7.5 重要
Network 		oneflow oneflow oneflowにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-65889 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306881 - micah_software full_armor Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CTRL><ALT><DEL> and kill the process using… NVD-CWE-Other
CVE-1999-1443 2016-10-18 11:04 1998-06-2 Show GitHub Exploit DB Packet Storm
306882 - slackware slackware_linux Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and … NVD-CWE-Other
CVE-1999-1445 2016-10-18 11:04 1998-02-2 Show GitHub Exploit DB Packet Storm
306883 - qualcomm eudora
eudora_light 		Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divi… NVD-CWE-Other
CVE-1999-1448 2016-10-18 11:04 1998-07-29 Show GitHub Exploit DB Packet Storm
306884 - macromedia matrix_screen_saver Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC … NVD-CWE-Other
CVE-1999-1454 2016-10-18 11:04 1999-10-4 Show GitHub Exploit DB Packet Storm
306885 - bmc patrol_agent BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program. NVD-CWE-Other
CVE-1999-1460 2016-10-18 11:04 1999-07-13 Show GitHub Exploit DB Packet Storm
306886 - sgi irix inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the P… NVD-CWE-Other
CVE-1999-1461 2016-10-18 11:04 1997-05-7 Show GitHub Exploit DB Packet Storm
306887 - hughes_technologies w3-auth Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header. NVD-CWE-Other
CVE-1999-1469 2016-10-18 11:04 1999-09-30 Show GitHub Exploit DB Packet Storm
306888 - redhat linux xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable. NVD-CWE-Other
CVE-1999-1490 2016-10-18 11:04 1998-05-28 Show GitHub Exploit DB Packet Storm
306889 - redhat linux abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program. NVD-CWE-Other
CVE-1999-1491 2016-10-18 11:04 1996-02-2 Show GitHub Exploit DB Packet Storm
306890 - redhat linux gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file. NVD-CWE-Other
CVE-1999-1332 2016-10-18 11:03 1999-12-31 Show GitHub Exploit DB Packet Storm