Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3541 7.1 重要
Network 		vLLM vLLM vLLMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-24779 2026-02-2 19:32 2026-01-27 Show GitHub Exploit DB Packet Storm
3542 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-24868 2026-02-2 19:32 2026-01-27 Show GitHub Exploit DB Packet Storm
3543 8.1 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-24869 2026-02-2 19:31 2026-01-27 Show GitHub Exploit DB Packet Storm
3544 8.2 重要
Network 		ThemeMove SmilePure ThemeMoveのWordPress用SmilePureにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-58958 2026-02-2 19:31 2025-10-22 Show GitHub Exploit DB Packet Storm
3545 8.2 重要
Network 		ThemeMove Businext ThemeMoveのWordPress用BusinextにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-58967 2026-02-2 19:31 2025-10-22 Show GitHub Exploit DB Packet Storm
3546 7.6 重要
Network 		Shopify Remix
React Router 		ShopifyのReact Router等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-59057 2026-02-2 19:31 2026-01-10 Show GitHub Exploit DB Packet Storm
3547 8.1 重要
Network 		ThemeMove Medizin ThemeMoveのWordPress用MedizinにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-59555 2026-02-2 19:31 2025-10-22 Show GitHub Exploit DB Packet Storm
3548 8.1 重要
Network 		ThemeMove Billey ThemeMoveのWordPress用BilleyにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-59558 2026-02-2 19:31 2025-10-22 Show GitHub Exploit DB Packet Storm
3549 8.1 重要
Network 		ThemeMove EduMall ThemeMoveのWordPress用EduMallにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-59564 2026-02-2 19:31 2025-10-22 Show GitHub Exploit DB Packet Storm
3550 8.1 重要
Network 		ThemeMove Minimogwp ThemeMoveのWordPress用MinimogwpにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-60069 2026-02-2 19:31 2025-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349491 - sco openserver
unixware 		The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a… NVD-CWE-Other
CVE-2004-1039 2008-09-6 05:40 2005-01-11 Show GitHub Exploit DB Packet Storm
349492 - citrix metaframe_client
program_neighborhood_agent 		Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via… NVD-CWE-Other
CVE-2004-1077 2008-09-6 05:40 2004-04-26 Show GitHub Exploit DB Packet Storm
349493 - citrix metaframe_client
program_neighborhood_agent 		Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote at… NVD-CWE-Other
CVE-2004-1078 2008-09-6 05:40 2004-04-26 Show GitHub Exploit DB Packet Storm
349494 - netscape navigator Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a d… NVD-CWE-Other
CVE-2004-1160 2008-09-6 05:40 2005-01-10 Show GitHub Exploit DB Packet Storm
349495 - gfi mailessentials
mailsecurity 		A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI … NVD-CWE-Other
CVE-2004-1312 2008-09-6 05:40 2005-01-3 Show GitHub Exploit DB Packet Storm
349496 - apple quicktime
mac_os_x
mac_os_x_server 		AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets. NVD-CWE-Other
CVE-2004-0921 2008-09-6 05:39 2005-01-27 Show GitHub Exploit DB Packet Storm
349497 - apple quicktime
mac_os_x
mac_os_x_server 		AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is… NVD-CWE-Other
CVE-2004-0922 2008-09-6 05:39 2005-01-27 Show GitHub Exploit DB Packet Storm
349498 - easy_software_products
apple 		cups
mac_os_x
mac_os_x_server 		NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not. NVD-CWE-Other
CVE-2004-0924 2008-09-6 05:39 2005-01-27 Show GitHub Exploit DB Packet Storm
349499 - easy_software_products
apple 		cups
mac_os_x
mac_os_x_server 		Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image. NVD-CWE-Other
CVE-2004-0926 2008-09-6 05:39 2005-01-27 Show GitHub Exploit DB Packet Storm
349500 - easy_software_products
apple 		cups
mac_os_x
mac_os_x_server 		ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions. NVD-CWE-Other
CVE-2004-0927 2008-09-6 05:39 2005-01-27 Show GitHub Exploit DB Packet Storm