Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
361 7.1 重要
Local 		Copier Copier CopierにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-23986 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
362 6.5 警告
Network 		franklioxygen MyTube franklioxygenのMyTubeにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-24139 2026-02-4 18:40 2026-01-24 Show GitHub Exploit DB Packet Storm
363 5.3 警告
Network 		franklioxygen MyTube franklioxygenのMyTubeにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-24140 2026-02-4 18:40 2026-01-24 Show GitHub Exploit DB Packet Storm
364 6.1 警告
Network 		butor team
Ghost Foundation		 Ghost
Portal 		Ghost FoundationのGhost等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24778 2026-02-4 18:40 2026-01-27 Show GitHub Exploit DB Packet Storm
365 5.4 警告
Network 		OpenEMR OpenEMR OpenEMRにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-47817 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
366 5.4 警告
Network 		Commvault Systems, Inc Commvault Commvault Systems, IncのCommvaultにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-12776 2026-02-4 18:40 2026-01-7 Show GitHub Exploit DB Packet Storm
367 7.5 重要
Network 		Html2Pdf project Html2Pdf Apryse Software Inc.のHTML2PDFにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-56589 2026-02-4 18:40 2026-01-22 Show GitHub Exploit DB Packet Storm
368 8.8 重要
Network 		ZwiiCMS ZwiiCMS ZwiiCMSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-57130 2026-02-4 18:40 2025-11-5 Show GitHub Exploit DB Packet Storm
369 5.4 警告
Network 		The Starware WorklogPRO The StarwareのWorklogPROにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-57681 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
370 7.5 重要
Network 		ollama ollama ollamaにおける複数の脆弱性 CWE-20
CWE-400
CVE-2025-66959 2026-02-4 18:40 2026-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307921 - ibm aix The perfstat kernel extension in bos.perf.perfstat in AIX 5.3 does not verify privileges when processing a SET call, which allows local users to cause a denial of service (system hang or crash) via u… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-4799 2011-03-8 11:59 2007-09-11 Show GitHub Exploit DB Packet Storm
307922 - hp system_management_homepage HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL upda… NVD-CWE-Other
CVE-2007-4931 2011-03-8 11:59 2007-09-19 Show GitHub Exploit DB Packet Storm
307923 - phpffl phpffl Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPFFL_FILE_ROOT parameter to (1) admin.php, (2) custom_pages.p… CWE-94
Code Injection 		CVE-2007-4935 2011-03-8 11:59 2007-09-19 Show GitHub Exploit DB Packet Storm
307924 - baofeng storm Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arbitrary code via malformed input in an unknown set of argume… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-4943 2011-03-8 11:59 2007-09-19 Show GitHub Exploit DB Packet Storm
307925 - redhat certificate_server Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certa… CWE-255
Credentials Management 		CVE-2007-4994 2011-03-8 11:59 2007-11-7 Show GitHub Exploit DB Packet Storm
307926 - gnome balsa Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-5007 2011-03-8 11:59 2007-12-13 Show GitHub Exploit DB Packet Storm
307927 - icewarp merak_mail_server Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inject arbitrary JavaScript via a javascript: URI in an attribu… CWE-79
Cross-site Scripting 		CVE-2007-5046 2011-03-8 11:59 2007-09-24 Show GitHub Exploit DB Packet Storm
307928 - ibm aix Buffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq group privileges to gain root privileges. NVD-CWE-Other
CVE-2007-4236 2011-03-8 11:58 2007-08-9 Show GitHub Exploit DB Packet Storm
307929 - ibm aix Buffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows local users to gain root privileges. NVD-CWE-Other
CVE-2007-4237 2011-03-8 11:58 2007-08-9 Show GitHub Exploit DB Packet Storm
307930 - ibm aix AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit. NVD-CWE-Other
CVE-2007-4238 2011-03-8 11:58 2007-08-9 Show GitHub Exploit DB Packet Storm