Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3281 9.8 緊急
Network 		Sangoma freepbx Sangomaのfreepbxにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-66039 2026-02-4 18:37 2025-12-9 Show GitHub Exploit DB Packet Storm
3282 6.1 警告
Network 		miniflux project miniflux miniflux projectのminifluxにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-67713 2026-02-4 18:37 2025-12-11 Show GitHub Exploit DB Packet Storm
3283 4.3 警告
Network 		ZITADEL ZITADEL ZITADELにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい 		CVE-2025-67717 2026-02-4 18:37 2025-12-11 Show GitHub Exploit DB Packet Storm
3284 6.5 警告
Network 		Pterodactyl Panel PterodactylのPanelにおける複数の脆弱性 CWE-400
CWE-413
CWE-667
CVE-2025-69198 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
3285 6.5 警告
Network 		Pterodactyl Wings PterodactylのWingsにおける複数の脆弱性 CWE-400
CWE-770
CWE-770
CVE-2025-69199 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
3286 9.8 緊急
Network 		fabianros Mobile Shop Management System In PHP With Source Code Fabian RosのMobile Shop Management System In PHP With Source Codeにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2025-69564 2026-02-4 18:37 2026-01-27 Show GitHub Exploit DB Packet Storm
3287 6.5 警告
Network 		PHPGurukul Online Course Registration PHPGurukulのOnline Course Registrationにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-70899 2026-02-4 18:37 2026-01-22 Show GitHub Exploit DB Packet Storm
3288 7.3 重要
Local 		Lenovo app store Lenovoのapp storeにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-8485 2026-02-4 18:37 2025-11-12 Show GitHub Exploit DB Packet Storm
3289 7.8 重要
Local 		Lenovo PCManager LenovoのPCManagerにおける不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行 		CVE-2025-8486 2026-02-4 18:37 2025-10-15 Show GitHub Exploit DB Packet Storm
3290 4.9 警告
Network 		M-Files M-Files Server M-FilesのM-Files Serverにおける入力の構文的正当性の検証に関する脆弱性 CWE-1286
入力の構文的正当性の不適切な検証 		CVE-2026-0663 2026-02-4 18:37 2026-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347881 - iss internet_scanner Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response. NVD-CWE-Other
CVE-2002-1122 2008-09-11 04:13 2002-09-24 Show GitHub Exploit DB Packet Storm
347882 - digital osf_1
ultrix 		Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable. NVD-CWE-Other
CVE-2002-1128 2008-09-11 04:13 2002-10-4 Show GitHub Exploit DB Packet Storm
347883 - gnu glibc The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a D… NVD-CWE-Other
CVE-2002-1146 2008-09-11 04:13 2002-10-11 Show GitHub Exploit DB Packet Storm
347884 - ibm websphere_caching_proxy_server Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request. NVD-CWE-Other
CVE-2002-1167 2008-09-11 04:13 2002-11-4 Show GitHub Exploit DB Packet Storm
347885 - ibm websphere_caching_proxy_server Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that … NVD-CWE-Other
CVE-2002-1168 2008-09-11 04:13 2002-11-4 Show GitHub Exploit DB Packet Storm
347886 - sun cobalt_raq_2
cobalt_raq_3i
cobalt_raq_4 		MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, follo… NVD-CWE-Other
CVE-2002-0430 2008-09-11 04:12 2002-08-12 Show GitHub Exploit DB Packet Storm
347887 - trend_micro interscan_viruswall Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header s… NVD-CWE-Other
CVE-2002-0440 2008-09-11 04:12 2002-07-26 Show GitHub Exploit DB Packet Storm
347888 - talentsoft web\+_server Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe. NVD-CWE-Other
CVE-2002-0450 2008-09-11 04:12 2002-07-26 Show GitHub Exploit DB Packet Storm
347889 - novell web_search Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search parameter. NVD-CWE-Other
CVE-2002-0530 2008-09-11 04:12 2002-08-12 Show GitHub Exploit DB Packet Storm
347890 - kth
luke_mewburn 		kth_kerberos
lukemftp 		Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request. NVD-CWE-Other
CVE-2002-0600 2008-09-11 04:12 2002-06-18 Show GitHub Exploit DB Packet Storm