Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
21	9.8	緊急 Network	EUROLAB srl	ELTS 100 Firmware	EUROLAB srlのELTS 100 Firmwareにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-63225	2026-02-6 10:40	2025-11-18	Show	GitHub Exploit DB Packet Storm

22	3.5	低 Adjacent	Freebox	Freebox One Firmware Freebox v5 HD Firmware Freebox v5 Crystal Firmware Freebox v6 Revolution Firmware Freebox Mini 4K&nbs…	FreeboxのFreebox Mini 4K Firmware等の複数製品における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2025-63292	2026-02-6 10:40	2025-11-17	Show	GitHub Exploit DB Packet Storm

23	6.5	警告 Network	workdo	HRM SaaS	WorkDoのHRM SaaSにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-63294	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

24	7.5	重要 Network	kiloview	E3 Firmware	Kiloview Electronics Co., Ltd.のE3 Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-63560	2026-02-6 10:40	2025-11-6	Show	GitHub Exploit DB Packet Storm

25	6.5	警告 Network	GuoMinJim	PersonManage	GuoMinJimのPersonManageにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2025-63686	2026-02-6 10:40	2025-11-7	Show	GitHub Exploit DB Packet Storm

26	5.4	警告 Network	Magento, Inc.	E-Commerce	Bhabishya-123のE-commerceにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63883	2026-02-6 10:40	2025-11-18	Show	GitHub Exploit DB Packet Storm

27	5.3	警告 Network	Salesforce.com, inc.	MuleSoft Anypoint Extension Pack	Salesforce.com, inc.のMuleSoft Anypoint Extension Packにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-64318	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

28	5.3	警告 Network	Salesforce.com, inc.	MuleSoft Anypoint Extension Pack	Salesforce.com, inc.のMuleSoft Anypoint Extension Packにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-64319	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

29	6.5	警告 Network	Salesforce.com, inc.	Agentforce Vibes	Salesforce.com, inc.のAgentforce Vibesにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-64320	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

30	5.3	警告 Network	Salesforce.com, inc.	Agentforce Vibes	Salesforce.com, inc.のAgentforce Vibesにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-64321	2026-02-6 10:40	2025-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306691	-	oracle	database_server	oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory …	NVD-CWE-Other	CVE-2001-1041	2016-10-18 11:14	2001-08-31	Show	GitHub Exploit DB Packet Storm

306692	-	webmin	webmin	Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.	NVD-CWE-Other	CVE-2001-1196	2016-10-18 11:14	2001-12-17	Show	GitHub Exploit DB Packet Storm

306693	-	timecop	wmcube_gdk	Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.	NVD-CWE-Other	CVE-2001-1201	2016-10-18 11:14	2001-12-17	Show	GitHub Exploit DB Packet Storm

306694	-	delegate	delegate	Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on …	NVD-CWE-Other	CVE-2001-1202	2016-10-18 11:14	2001-12-28	Show	GitHub Exploit DB Packet Storm

306695	-	matrixs_cgi_vault	last_lines	Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.	CWE-22 Path Traversal	CVE-2001-1205	2016-10-18 11:14	2001-12-30	Show	GitHub Exploit DB Packet Storm

306696	-	matrixs_cgi_vault	last_lines	Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.	NVD-CWE-Other	CVE-2001-1206	2016-10-18 11:14	2001-12-30	Show	GitHub Exploit DB Packet Storm

306697	-	daydream	daydream_bbs	Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.	NVD-CWE-Other	CVE-2001-1208	2016-10-18 11:14	2001-12-31	Show	GitHub Exploit DB Packet Storm

306698	-	icecast libshout	icecast libshout	Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.	NVD-CWE-Other	CVE-2001-1229	2016-10-18 11:14	2001-03-12	Show	GitHub Exploit DB Packet Storm

306699	-	icecast	icecast	Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.	NVD-CWE-Other	CVE-2001-1230	2016-10-18 11:14	2001-03-13	Show	GitHub Exploit DB Packet Storm

306700	-	itcorp	ispell	ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.	NVD-CWE-Other	CVE-2001-1276	2016-10-18 11:14	2001-06-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed