Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
711 9.8 緊急
Network 		yunjie.xiao openvpn-cms-flask yunjie.xiaoのopenvpn-cms-flaskにおける複数の脆弱性 CWE-74
CWE-77
CWE-77
CVE-2025-6775 2026-02-2 19:30 2025-06-27 Show GitHub Exploit DB Packet Storm
712 9.8 緊急
Network 		yunjie.xiao openvpn-cms-flask yunjie.xiaoのopenvpn-cms-flaskにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-6776 2026-02-2 19:30 2025-06-27 Show GitHub Exploit DB Packet Storm
713 8.1 重要
Network 		Qode Interactive Optimize Qode InteractiveのWordPress用OptimizeにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-67935 2026-02-2 19:30 2026-01-8 Show GitHub Exploit DB Packet Storm
714 8.1 重要
Network 		Qode Interactive Curly Qode InteractiveのWordPress用CurlyにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-67936 2026-02-2 19:30 2026-01-8 Show GitHub Exploit DB Packet Storm
715 8.1 重要
Network 		Qode Interactive Hendon Qode InteractiveのWordPress用HendonにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-67937 2026-02-2 19:30 2026-01-8 Show GitHub Exploit DB Packet Storm
716 7.5 重要
Network 		ThemeMove EduMall ThemeMoveのWordPress用EduMallにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-68061 2026-02-2 19:30 2025-12-16 Show GitHub Exploit DB Packet Storm
717 7.5 重要
Network 		ThemeMove Minimogwp ThemeMoveのWordPress用MinimogwpにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2025-68062 2026-02-2 19:30 2025-12-16 Show GitHub Exploit DB Packet Storm
718 6.5 警告
Network 		Shopify React Router ShopifyのReact Routerにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-68470 2026-02-2 19:30 2026-01-10 Show GitHub Exploit DB Packet Storm
719 7.5 重要
Network 		wpwebelite Follow My Blog Post WPWeb EliteのWordPress用Follow My Blog Postにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-68547 2026-02-2 19:30 2026-01-5 Show GitHub Exploit DB Packet Storm
720 9.1 緊急
Network 		Panda Wireless PWRU01 Firmware Panda WirelessのPWRU01 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-68715 2026-02-2 19:30 2026-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307571 - kde konqueror
kde 		The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execut… NVD-CWE-Other
CVE-2002-1151 2016-10-18 11:24 2002-10-11 Show GitHub Exploit DB Packet Storm
307572 - kde kde Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote… NVD-CWE-Other
CVE-2002-1152 2016-10-18 11:24 2002-10-11 Show GitHub Exploit DB Packet Storm
307573 - ibm websphere_application_server IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host". NVD-CWE-Other
CVE-2002-1153 2016-10-18 11:24 2002-10-11 Show GitHub Exploit DB Packet Storm
307574 - redhat linux The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth f… NVD-CWE-Other
CVE-2002-1160 2016-10-18 11:24 2003-02-19 Show GitHub Exploit DB Packet Storm
307575 - sendmail
netbsd 		sendmail
netbsd 		Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by i… NVD-CWE-Other
CVE-2002-1165 2016-10-18 11:24 2002-10-11 Show GitHub Exploit DB Packet Storm
307576 - john_franks wn_server Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request. NVD-CWE-Other
CVE-2002-1166 2016-10-18 11:24 2002-10-11 Show GitHub Exploit DB Packet Storm
307577 - fetchmail fetchmail Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readh… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2002-1174 2016-10-18 11:24 2002-10-11 Show GitHub Exploit DB Packet Storm
307578 - fetchmail fetchmail The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a… CWE-20
 Improper Input Validation  		CVE-2002-1175 2016-10-18 11:24 2002-10-11 Show GitHub Exploit DB Packet Storm
307579 - nullsoft winamp Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file. NVD-CWE-Other
CVE-2002-1176 2016-10-18 11:24 2002-12-26 Show GitHub Exploit DB Packet Storm
307580 - nullsoft winamp Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Albu… NVD-CWE-Other
CVE-2002-1177 2016-10-18 11:24 2002-12-26 Show GitHub Exploit DB Packet Storm