Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
421 6.5 警告
Network 		GLPI-PROJECT.ORG GLPI GLPI-PROJECT.ORGのGLPIにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-59935 2026-02-4 18:38 2025-12-16 Show GitHub Exploit DB Packet Storm
422 3.5 低
Network 		マイクロソフト Microsoft Edge Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2025-62224 2026-02-4 18:38 2026-01-7 Show GitHub Exploit DB Packet Storm
423 9.8 緊急
Network 		Sangoma freepbx Sangomaのfreepbxにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-66039 2026-02-4 18:37 2025-12-9 Show GitHub Exploit DB Packet Storm
424 6.1 警告
Network 		miniflux project miniflux miniflux projectのminifluxにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-67713 2026-02-4 18:37 2025-12-11 Show GitHub Exploit DB Packet Storm
425 4.3 警告
Network 		ZITADEL ZITADEL ZITADELにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい 		CVE-2025-67717 2026-02-4 18:37 2025-12-11 Show GitHub Exploit DB Packet Storm
426 6.5 警告
Network 		Pterodactyl Panel PterodactylのPanelにおける複数の脆弱性 CWE-400
CWE-413
CWE-667
CVE-2025-69198 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
427 6.5 警告
Network 		Pterodactyl Wings PterodactylのWingsにおける複数の脆弱性 CWE-400
CWE-770
CWE-770
CVE-2025-69199 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
428 9.8 緊急
Network 		fabianros Mobile Shop Management System In PHP With Source Code Fabian RosのMobile Shop Management System In PHP With Source Codeにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2025-69564 2026-02-4 18:37 2026-01-27 Show GitHub Exploit DB Packet Storm
429 6.5 警告
Network 		PHPGurukul Online Course Registration PHPGurukulのOnline Course Registrationにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-70899 2026-02-4 18:37 2026-01-22 Show GitHub Exploit DB Packet Storm
430 7.3 重要
Local 		Lenovo app store Lenovoのapp storeにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-8485 2026-02-4 18:37 2025-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307251 - oracle e-business_suite
report_manager_component 		Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors. NVD-CWE-noinfo
CVE-2008-2585 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307252 - oracle advanced_replication
database_9i
database_server 		Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors. NVD-CWE-noinfo
CVE-2008-2587 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307253 - oracle database_server
enterprise_manager_10g
instance_management_component 		Unspecified vulnerability in the Instance Management component in Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 has unknown impact and remote authenticated attack vectors. NVD-CWE-noinfo
CVE-2008-2590 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307254 - oracle database_9i
database_server 		Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors. NVD-CWE-noinfo
CVE-2008-2591 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307255 - oracle e-business_suite
mobile_application_server 		Unspecified vulnerability in the Mobile Application Server component in Oracle E-Business Suite 12.0.3 has unknown impact and remote authenticated attack vectors. NVD-CWE-noinfo
CVE-2008-2596 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307256 - oracle times_ten_client_server_component
times_ten_in_memory_database 		Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-200… NVD-CWE-noinfo
CVE-2008-2597 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307257 - oracle times_ten_client_server
times_ten_in_memory_database 		Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-200… NVD-CWE-noinfo
CVE-2008-2598 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307258 - oracle times_ten_client_server
times_ten_in_memory_database 		Unspecified vulnerability in the TimesTen Client/Server component in Oracle Times Ten In-Memory Database 7.0.3.0.0 has unknown impact and remote attack vectors, a different vulnerability than CVE-200… NVD-CWE-noinfo
CVE-2008-2599 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307259 - oracle database_server
oracle_database
spatial_component 		Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to MDSYS.SDO_TOPO_MAP. NVD-CWE-noinfo
CVE-2008-2600 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm
307260 - oracle e-business_suite Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors. NVD-CWE-noinfo
CVE-2008-2601 2012-10-23 11:48 2008-07-16 Show GitHub Exploit DB Packet Storm