Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
511 7.5 重要
Network 		TP-LINK Technologies TL-WR841N ファームウェア TP-LINK TechnologiesのTL-WR841N ファームウェアにおける複数の脆弱性 CWE-20
CWE-476
CVE-2025-9014 2026-02-2 19:39 2026-01-15 Show GitHub Exploit DB Packet Storm
512 5.5 警告
Network 		Zoho Corporation ManageEngine ADManager Plus Zoho CorporationのManageEngine ADManager Plusにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-9435 2026-02-2 19:39 2026-01-13 Show GitHub Exploit DB Packet Storm
513 6.1 警告
Network 		Zoho Corporation manageengine applications manager Zoho CorporationのManageEngine Applications Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-9787 2026-02-2 19:39 2025-12-18 Show GitHub Exploit DB Packet Storm
514 6.1 警告
Network 		ironmansoftware powershell universal ironmansoftwareのpowershell universalにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-0618 2026-02-2 19:39 2026-01-7 Show GitHub Exploit DB Packet Storm
515 8.8 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-0765 2026-02-2 19:39 2026-01-23 Show GitHub Exploit DB Packet Storm
516 8.8 重要
Network 		openwebui open webui openwebuiのopen webuiにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-0766 2026-02-2 19:39 2026-01-23 Show GitHub Exploit DB Packet Storm
517 6.5 警告
Adjacent 		openwebui open webui openwebuiのopen webuiにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-0767 2026-02-2 19:38 2026-01-23 Show GitHub Exploit DB Packet Storm
518 3.5 低
Network 		gitea project gitea gitea projectのgiteaにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-0798 2026-02-2 19:38 2026-01-22 Show GitHub Exploit DB Packet Storm
519 4.3 警告
Network 		Mozilla Foundation Mozilla Thunderbird Mozilla FoundationのMozilla Thunderbirdにおける複数の脆弱性 CWE-116
CWE-200
CWE-352
CVE-2026-0818 2026-02-2 19:38 2026-01-28 Show GitHub Exploit DB Packet Storm
520 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける複数の脆弱性 CWE-125
CWE-787
CVE-2026-0899 2026-02-2 19:38 2026-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307081 - ibm websphere_application_server The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3, when APAR PK41002 is installed, does not p… CWE-20
 Improper Input Validation  		CVE-2009-1172 2014-10-24 14:37 2009-03-31 Show GitHub Exploit DB Packet Storm
307082 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-1173 2014-10-24 14:37 2009-03-31 Show GitHub Exploit DB Packet Storm
307083 - oracle database_server Unspecified vulnerability in the Workspace Manager component in Oracle Database 11.1.0.6, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect co… NVD-CWE-noinfo
CVE-2009-0972 2014-09-9 02:56 2009-04-15 Show GitHub Exploit DB Packet Storm
307084 - mp3info mp3info Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this … NVD-CWE-Other
CVE-2006-2465 2014-05-31 11:22 2006-05-19 Show GitHub Exploit DB Packet Storm
307085 - emc avamar Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by sending a crafted message using TCP. NVD-CWE-noinfo
CVE-2010-1919 2014-05-5 13:43 2010-05-29 Show GitHub Exploit DB Packet Storm
307086 - oracle application_server Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTM… NVD-CWE-noinfo
CVE-2009-1011 2014-01-14 12:46 2009-04-15 Show GitHub Exploit DB Packet Storm
307087 - perl perl Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular… CWE-189
Numeric Errors 		CVE-2010-1158 2013-10-24 12:22 2010-04-21 Show GitHub Exploit DB Packet Storm
307088 - larry_wall perl Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build dir… NVD-CWE-Other
CVE-2005-4278 2013-10-24 10:56 2005-12-16 Show GitHub Exploit DB Packet Storm
307089 - bluecoat proxysg_va-10
proxysg_va-15
proxysg_va-20
proxysg_va-5
proxysg
proxysg_sg210-10
proxysg_sg210-25
proxysg_sg210-5
proxysg_sg510-10
proxysg_sg510-20
proxysg_sg510-25
pr… 		Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, … CWE-16
Configuration 		CVE-2009-1211 2013-10-8 01:17 2009-04-1 Show GitHub Exploit DB Packet Storm
307090 - argosoft argosoft_mail_server ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the email to the user while autoresponse is enabled, which creates an infin… NVD-CWE-Other
CVE-2002-1005 2013-10-1 10:22 2002-10-4 Show GitHub Exploit DB Packet Storm