Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
891	7.8	重要 Local		-	1E Ltdの1E Platformにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2025-1683	2026-02-2 19:22	2025-03-12	Show	GitHub Exploit DB Packet Storm

892	7.5	重要 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおける重要情報を含む Web ブラウザキャッシュの使用に関する脆弱性	CWE-525 重要情報を含む Web ブラウザキャッシュの使用	CVE-2025-52659	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

893	5.3	警告 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-52661	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

894	5.3	警告 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2025-55249	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

895	9.8	緊急 Network	ipTIME	A8004ITL Firmware A104NS Firmware N704E plus Firmware A604-V5 Firmware N602E Firmware N3-I Firmware A604 Firmware N104V Firmware A…	ipTIMEのA1004 Firmware等の複数製品におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-55423	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

896	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-59464	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

897	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-59465	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

898	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるキャッチされない例外に関する脆弱性	CWE-248 キャッチされない例外	CVE-2025-59466	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

899	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63082	2026-02-2 19:22	2026-01-6	Show	GitHub Exploit DB Packet Storm

900	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63083	2026-02-2 19:22	2026-01-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
283251	-	e-annu	e-annu	SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a parameter.	NVD-CWE-Other	CVE-2007-2416	2018-10-17 01:43	2007-05-1	Show	GitHub Exploit DB Packet Storm

283252	-	cerulean_studios	trillian_pro	Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\rendezvous.dll) for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote atta…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-2418	2018-10-17 01:43	2007-05-3	Show	GitHub Exploit DB Packet Storm

283253	-	macrovision	flexnet_connect update_service	Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the (1) the second …	NVD-CWE-Other	CVE-2007-2419	2018-10-17 01:43	2007-06-6	Show	GitHub Exploit DB Packet Storm

283254	-	burak_yilmaz	burak_yilmaz_blog	SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.	NVD-CWE-Other	CVE-2007-2420	2018-10-17 01:43	2007-05-2	Show	GitHub Exploit DB Packet Storm

283255	-	ahhp-portal	ahhp-portal	Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) fp or (2) sc parameter.	CWE-94 Code Injection	CVE-2007-2428	2018-10-17 01:43	2007-05-2	Show	GitHub Exploit DB Packet Storm

283256	-	vim_development_group	vim	The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow user-assisted attackers to execute shell commands and write files via modelines.	NVD-CWE-Other	CVE-2007-2438	2018-10-17 01:43	2007-05-3	Show	GitHub Exploit DB Packet Storm

283257	-	vim_development_group	vim	Successful exploitation requires that the "modelines" option is enabled and the user is tricked into opening a malicious file.	NVD-CWE-Other	CVE-2007-2438	2018-10-17 01:43	2007-05-3	Show	GitHub Exploit DB Packet Storm

283258	-	vim_development_group	vim	The vendor has addressed this issue with the following patches: VIM Development Group VIM 7.0- VIM Development Group patch 7.0.234 ftp://ftp.vim.org/pub/vim/patches/7.0/7.0.234 VIM Developm…	NVD-CWE-Other	CVE-2007-2438	2018-10-17 01:43	2007-05-3	Show	GitHub Exploit DB Packet Storm

283259	-	png_reference_library	libpng	The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a ba…	NVD-CWE-noinfo	CVE-2007-2445	2018-10-17 01:43	2007-05-17	Show	GitHub Exploit DB Packet Storm

283260	-	samba	samba	Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (ne…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-2446	2018-10-17 01:43	2007-05-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed