Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
281 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. ax1803 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のax1803 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-1329 2026-02-5 15:44 2026-01-22 Show GitHub Exploit DB Packet Storm
282 6.7 警告
Local
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-1285
CWE-787
CVE-2026-20413 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
283 6.7 警告
Local
Google Android GoogleのAndroidにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-20414 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
284 5.5 警告
Local
Google Android GoogleのAndroidにおける複数の脆弱性 CWE-415
CWE-667
CVE-2026-20415 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
285 5.3 警告
Local
Google Android GoogleのAndroidにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-20417 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
286 7.5 重要
Network
OpenWrt Project
メディアテック
Software Development Kit
openwrt
nbiot sdk
メディアテック等の複数ベンダの製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2026-20419 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
287 7.5 重要
Network
メディアテック nr16
nr17
NR15
NR17R
メディアテックのNR15等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-20420 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
288 7.5 重要
Network
メディアテック NR15 メディアテックのNR15における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-20421 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
289 7.5 重要
Network
メディアテック nr16
nr17
NR15
NR17R
メディアテックのNR15等の複数製品における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション
CVE-2026-20422 2026-02-5 15:44 2026-02-2 Show GitHub Exploit DB Packet Storm
290 5.1 警告
Local
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chrome ベース) のセキュリティ機能のバイパスの脆弱性 CWE-269
不適切な権限管理
CVE-2026-21223 2026-02-5 15:44 2026-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307771 - raidenhttpd raidenhttpd Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the ulang parameter. CWE-79
Cross-site Scripting
CVE-2008-0622 2011-03-8 12:05 2008-02-6 Show GitHub Exploit DB Packet Storm
307772 - adobe robohelp Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote atta… CWE-79
Cross-site Scripting
CVE-2008-0642 2011-03-8 12:05 2008-02-15 Show GitHub Exploit DB Packet Storm
307773 - deluge_team
rasterbar_software
deluge
libtorrent
The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attacker… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-0646 2011-03-8 12:05 2008-02-8 Show GitHub Exploit DB Packet Storm
307774 - novell challenge_response_client
novell_client_for_windows
Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users with physical access to a locked system to obtain contents of the clipboard by … NVD-CWE-Other
CVE-2008-0663 2011-03-8 12:05 2008-02-8 Show GitHub Exploit DB Packet Storm
307775 - wordpress wordpress The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0664 2011-03-8 12:05 2008-02-8 Show GitHub Exploit DB Packet Storm
307776 - gnome gnumeric The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing … CWE-189
Numeric Errors
CVE-2008-0668 2011-03-8 12:05 2008-02-12 Show GitHub Exploit DB Packet Storm
307777 - print_manager_plus client_billing_and_authentication Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allows remote attackers to cause a denial of service (service outage) via a series of… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-0693 2011-03-8 12:05 2008-02-12 Show GitHub Exploit DB Packet Storm
307778 - ibm os_400 Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header. CWE-79
Cross-site Scripting
CVE-2008-0694 2011-03-8 12:05 2008-02-12 Show GitHub Exploit DB Packet Storm
307779 - ibm db2 IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0696 2011-03-8 12:05 2008-02-12 Show GitHub Exploit DB Packet Storm
307780 - ibm db2 Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0697 2011-03-8 12:05 2008-02-12 Show GitHub Exploit DB Packet Storm