Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2821	7.5	重要 Network	ThemeMove	Minimogwp	ThemeMoveのWordPress用MinimogwpにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-68062	2026-02-2 19:30	2025-12-16	Show	GitHub Exploit DB Packet Storm

2822	6.5	警告 Network	Shopify	React Router	ShopifyのReact Routerにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2025-68470	2026-02-2 19:30	2026-01-10	Show	GitHub Exploit DB Packet Storm

2823	7.5	重要 Network	wpwebelite	Follow My Blog Post	WPWeb EliteのWordPress用Follow My Blog Postにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-68547	2026-02-2 19:30	2026-01-5	Show	GitHub Exploit DB Packet Storm

2824	9.1	緊急 Network	Panda Wireless	PWRU01 Firmware	Panda WirelessのPWRU01 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-68715	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

2825	5.4	警告 Network	Qode Interactive	Backpack Traveler	Qode InteractiveのWordPress用Backpack Travelerにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2025-69030	2026-02-2 19:30	2025-12-30	Show	GitHub Exploit DB Packet Storm

2826	5.4	警告 Network	Lullabot	Fivestar	Qode InteractiveのWordPress用FiveStarにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2025-69032	2026-02-2 19:30	2025-12-30	Show	GitHub Exploit DB Packet Storm

2827	8.1	重要 Network	Qode Interactive	Lekker	Qode InteractiveのWordPress用LekkerにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-69034	2026-02-2 19:30	2025-12-30	Show	GitHub Exploit DB Packet Storm

2828	5.4	警告 Network	remyandrade	Domain Availability Checker Using PHP and JavaScript with Source Code	Remy AndradeのDomain Availability Checker Using PHP and JavaScript with Source Codeにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-70458	2026-02-2 19:30	2026-01-23	Show	GitHub Exploit DB Packet Storm

2829	6.1	警告 Network	fahadmahmood	External Store for Shopify	fahadmahmoodのWordPress用External Store for Shopifyにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-7808	2026-02-2 19:29	2025-08-14	Show	GitHub Exploit DB Packet Storm

2830	9.8	緊急 Network	Cockroach Labs	cockroach-k8s-request-cert	Cockroach Labsのcockroach-k8s-request-certにおける設定ファイル内の空のパスワードに関する脆弱性	CWE-258 設定ファイル内に空のパスワード	CVE-2025-9276	2026-02-2 19:29	2025-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348121	-	apache	james	Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock fr…	NVD-CWE-Other	CVE-2004-2650	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348122	-	pd9_software	megabbs	Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp.	NVD-CWE-Other	CVE-2004-2653	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348123	-	squid	squid	The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigge…	NVD-CWE-Other	CVE-2004-2654	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348124	-	suse	suse_linux	resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types.	NVD-CWE-Other	CVE-2004-2658	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348125	-	soft3304	04webserver	Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI source code).	NVD-CWE-Other	CVE-2004-2661	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348126	-	soft3304	04webserver	Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, which causes a thread to terminate but conti…	NVD-CWE-Other	CVE-2004-2662	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348127	-	john_lim	adodb	John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which reveals…	NVD-CWE-Other	CVE-2004-2664	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348128	-	john_lim	adodb	This vulnerability is addressed in the following product release: John Lim, ADOdb, 4.23	NVD-CWE-Other	CVE-2004-2664	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348129	-	mantis	mantis	Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (privat…	NVD-CWE-Other	CVE-2004-2666	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm

348130	-	-	-	Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.	NVD-CWE-Other	CVE-2004-2667	2008-09-6 05:44	2004-12-31	Show	GitHub Exploit DB Packet Storm