Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
391 5.5 警告
Local 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-22795 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
392 5.3 警告
Network 		OpenSSL Project OpenSSL OpenSSL ProjectのOpenSSLにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-22796 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
393 6.5 警告
Network 		LibreNMS LibreNMS LibreNMSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2020-36947 2026-02-4 18:39 2026-01-27 Show GitHub Exploit DB Packet Storm
394 9.8 緊急
Network 		tendenci tendenci tendenciにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2020-36962 2026-02-4 18:39 2026-01-28 Show GitHub Exploit DB Packet Storm
395 9.8 緊急
Network 		Hasura Inc. GraphQL Engine Hasura Inc.のGraphQL EngineにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2021-47748 2026-02-4 18:39 2026-01-21 Show GitHub Exploit DB Packet Storm
396 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-Other
その他 		CVE-2023-53061 2026-02-4 18:39 2025-05-2 Show GitHub Exploit DB Packet Storm
397 7.2 重要
Network 		Grabaperch Perch GrabaperchのPerchにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2023-53889 2026-02-4 18:39 2025-12-15 Show GitHub Exploit DB Packet Storm
398 3.9 低
Physics 		サムスン android サムスンのAndroidにおける不特定の脆弱性 CWE-Other
その他 		CVE-2024-49422 2026-02-4 18:39 2024-12-31 Show GitHub Exploit DB Packet Storm
399 7.8 重要
Local 		Lenovo PCManager LenovoのPCManagerにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-10581 2026-02-4 18:38 2025-10-15 Show GitHub Exploit DB Packet Storm
400 8.1 重要
Network 		Zoho Corporation ManageEngine Password Manager Pro
ManageEngine PAM360
ManageEngine Access Manager Plus 		Zoho CorporationのManageEngine Access Manager Plus等の複数製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-11669 2026-02-4 18:38 2026-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306641 - aol aol_server AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file. NVD-CWE-Other
CVE-2002-0100 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306642 - oracle application_server_web_cache An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2)… NVD-CWE-Other
CVE-2002-0103 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306643 - aftpd aftpd AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump. NVD-CWE-Other
CVE-2002-0104 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306644 - caldera unixware CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable. NVD-CWE-Other
CVE-2002-0105 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306645 - bea weblogic_server BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name. NVD-CWE-Other
CVE-2002-0106 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306646 - cacheflow cacheos Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another v… NVD-CWE-Other
CVE-2002-0107 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306647 - linksys befn2ps4
befsr41
befsr81 		Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the def… NVD-CWE-Other
CVE-2002-0109 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306648 - nevrona_designs miramail Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the… NVD-CWE-Other
CVE-2002-0110 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306649 - funsoft dinos_webserver Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL. NVD-CWE-Other
CVE-2002-0111 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
306650 - etype eserv Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. NVD-CWE-Other
CVE-2002-0112 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm