Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251 5.3 警告
Network 		Node.js Foundation Node.js Node.js FoundationのNode.jsにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-55132 2026-02-5 15:46 2026-01-20 Show GitHub Exploit DB Packet Storm
252 7.5 重要
Network 		OwnTone project OwnTone OwnTone projectのOwnToneにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2025-57155 2026-02-5 15:46 2026-01-20 Show GitHub Exploit DB Packet Storm
253 6.5 警告
Network 		Engineering Ingegneria Informatica knowage Engineering Ingegneria Informaticaのknowageにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-58441 2026-02-5 15:46 2026-01-7 Show GitHub Exploit DB Packet Storm
254 8.7 重要
Network 		Ultimate Fosters Ultimate POS Ultimate FostersのUltimate POSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-60503 2026-02-5 15:46 2025-11-3 Show GitHub Exploit DB Packet Storm
255 5.3 警告
Network 		The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-61730 2026-02-5 15:46 2026-01-28 Show GitHub Exploit DB Packet Storm
256 4.3 警告
Network 		webinarpress webinarpress WordPress用webinarpressにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-62972 2026-02-5 15:45 2025-10-27 Show GitHub Exploit DB Packet Storm
257 7.5 重要
Network 		oneflow oneflow oneflowにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-65886 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
258 6.5 警告
Network 		oneflow oneflow oneflowにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2025-65887 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
259 7.5 重要
Network 		oneflow oneflow oneflowにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-65888 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
260 7.5 重要
Network 		oneflow oneflow oneflowにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2025-65889 2026-02-5 15:45 2026-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307061 - ibm proventia_network_ips_gx5008
proventia_network_ips_gx5108 		PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NVD-CWE-Other
CVE-2007-3831 2012-10-31 11:39 2007-07-18 Show GitHub Exploit DB Packet Storm
307062 - apple safari corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors related to History, possibly involvi… NVD-CWE-Other
CVE-2007-3284 2012-10-31 11:38 2007-06-20 Show GitHub Exploit DB Packet Storm
307063 - yourfreescreamer yourfreescreamer Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the serverPath paramete… NVD-CWE-Other
CVE-2007-3315 2012-10-31 11:38 2007-06-22 Show GitHub Exploit DB Packet Storm
307064 - gorani_network 6alblog SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the member parameter. NOTE: the provenance of this information is unknown; the detai… NVD-CWE-Other
CVE-2007-3450 2012-10-31 11:38 2007-06-27 Show GitHub Exploit DB Packet Storm
307065 - clam_anti-virus clamav unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors. NVD-CWE-Other
CVE-2007-3023 2012-10-31 11:37 2007-06-8 Show GitHub Exploit DB Packet Storm
307066 - maradns maradns Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, a different set of affected versions… CWE-399
 Resource Management Errors 		CVE-2007-3116 2012-10-31 11:37 2007-06-8 Show GitHub Exploit DB Packet Storm
307067 - ibm aix Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users to gain privileges via unspecified vectors related to the … NVD-CWE-Other
CVE-2007-2996 2012-10-31 11:36 2007-06-5 Show GitHub Exploit DB Packet Storm
307068 - symantec antivirus_scan_engine
brightmail_antispam
client_security
mail_security
norton_antivirus
norton_internet_security
norton_personal_firewall
norton_system_works
symantec_antivir… 		Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-0447 2012-10-31 11:28 2007-10-6 Show GitHub Exploit DB Packet Storm
307069 - mortbay_jetty jetty Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI. CWE-22
Path Traversal 		CVE-2007-6672 2012-10-30 12:04 2008-01-8 Show GitHub Exploit DB Packet Storm
307070 - amxmodx
valve_software 		amx_mod_x
half-life_dedicated_server 		Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a denial of service via unspecified input related to g… CWE-189
Numeric Errors 		CVE-2007-5713 2012-10-30 12:00 2007-10-31 Show GitHub Exploit DB Packet Storm