Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
711	9.8	緊急 Network	yunjie.xiao	openvpn-cms-flask	yunjie.xiaoのopenvpn-cms-flaskにおける複数の脆弱性	CWE-74 CWE-77 CWE-77	CVE-2025-6775	2026-02-2 19:30	2025-06-27	Show	GitHub Exploit DB Packet Storm

712	9.8	緊急 Network	yunjie.xiao	openvpn-cms-flask	yunjie.xiaoのopenvpn-cms-flaskにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-6776	2026-02-2 19:30	2025-06-27	Show	GitHub Exploit DB Packet Storm

713	8.1	重要 Network	Qode Interactive	Optimize	Qode InteractiveのWordPress用OptimizeにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-67935	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

714	8.1	重要 Network	Qode Interactive	Curly	Qode InteractiveのWordPress用CurlyにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-67936	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

715	8.1	重要 Network	Qode Interactive	Hendon	Qode InteractiveのWordPress用HendonにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-67937	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

716	7.5	重要 Network	ThemeMove	EduMall	ThemeMoveのWordPress用EduMallにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-68061	2026-02-2 19:30	2025-12-16	Show	GitHub Exploit DB Packet Storm

717	7.5	重要 Network	ThemeMove	Minimogwp	ThemeMoveのWordPress用MinimogwpにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-68062	2026-02-2 19:30	2025-12-16	Show	GitHub Exploit DB Packet Storm

718	6.5	警告 Network	Shopify	React Router	ShopifyのReact Routerにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2025-68470	2026-02-2 19:30	2026-01-10	Show	GitHub Exploit DB Packet Storm

719	7.5	重要 Network	wpwebelite	Follow My Blog Post	WPWeb EliteのWordPress用Follow My Blog Postにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-68547	2026-02-2 19:30	2026-01-5	Show	GitHub Exploit DB Packet Storm

720	9.1	緊急 Network	Panda Wireless	PWRU01 Firmware	Panda WirelessのPWRU01 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-68715	2026-02-2 19:30	2026-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307161	-	fr.simon_rundell	pd_resources	SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecif…	CWE-89 SQL Injection	CVE-2009-4396	2013-01-4 14:00	2009-12-23	Show	GitHub Exploit DB Packet Storm

307162	-	vocera	wireless_handset	Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashe…	CWE-20 Improper Input Validation	CVE-2008-1114	2013-01-3 14:00	2008-03-4	Show	GitHub Exploit DB Packet Storm

307163	-	oracle	secure_backup	Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.	NVD-CWE-noinfo	CVE-2008-3981	2013-01-3 14:00	2009-01-14	Show	GitHub Exploit DB Packet Storm

307164	-	nec	mobile_handset	Unspecified vulnerability in the NEC mobile handset allows remote attackers to cause a denial of service (reboot) via crafted packets. NOTE: as of 20071016, the only disclosure is a vague pre-advisor…	CWE-20 Improper Input Validation	CVE-2007-5557	2013-01-3 14:00	2007-10-19	Show	GitHub Exploit DB Packet Storm

307165	-	mybb	mybb	Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified impact and attack vectors, related to (1) admin/moderate.php, (2) admin/themes.php, (3) inc/functions.php,…	NVD-CWE-noinfo	CVE-2006-0218	2013-01-3 14:00	2006-01-17	Show	GitHub Exploit DB Packet Storm

307166	-	invisionpower	invision_power_board	The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to …	CWE-287 Improper Authentication	CVE-2006-0633	2013-01-3 14:00	2006-02-10	Show	GitHub Exploit DB Packet Storm

307167	-	zen-cart	zen_cart	Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-0697	2013-01-3 14:00	2006-02-15	Show	GitHub Exploit DB Packet Storm

307168	-	e107	e107	Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter.	NVD-CWE-Other	CVE-2010-2098	2012-12-13 13:00	2010-05-28	Show	GitHub Exploit DB Packet Storm

307169	-	e107	e107	Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist'	NVD-CWE-Other	CVE-2010-2098	2012-12-13 13:00	2010-05-28	Show	GitHub Exploit DB Packet Storm

307170	-	kerio	personal_firewall serverfirewall	The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Env…	NVD-CWE-Other	CVE-2005-3286	2012-12-13 11:43	2005-10-23	Show	GitHub Exploit DB Packet Storm