Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
891	7.8	重要 Local		-	1E Ltdの1E Platformにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2025-1683	2026-02-2 19:22	2025-03-12	Show	GitHub Exploit DB Packet Storm

892	7.5	重要 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおける重要情報を含む Web ブラウザキャッシュの使用に関する脆弱性	CWE-525 重要情報を含む Web ブラウザキャッシュの使用	CVE-2025-52659	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

893	5.3	警告 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-52661	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

894	5.3	警告 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2025-55249	2026-02-2 19:22	2026-01-19	Show	GitHub Exploit DB Packet Storm

895	9.8	緊急 Network	ipTIME	A8004ITL Firmware A104NS Firmware N704E plus Firmware A604-V5 Firmware N602E Firmware N3-I Firmware A604 Firmware N104V Firmware A…	ipTIMEのA1004 Firmware等の複数製品におけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2025-55423	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

896	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-59464	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

897	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2025-59465	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

898	7.5	重要 Network	Node.js Foundation	Node.js	Node.js FoundationのNode.jsにおけるキャッチされない例外に関する脆弱性	CWE-248 キャッチされない例外	CVE-2025-59466	2026-02-2 19:22	2026-01-20	Show	GitHub Exploit DB Packet Storm

899	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63082	2026-02-2 19:22	2026-01-6	Show	GitHub Exploit DB Packet Storm

900	6.1	警告 Network	Joomla!	Joomla!	Joomla!におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-63083	2026-02-2 19:22	2026-01-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307371	-	vignette	content_suite storyserver vignette	Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and direct…	NVD-CWE-Other	CVE-2003-0399	2016-10-18 11:33	2003-07-2	Show	GitHub Exploit DB Packet Storm

307372	-	vignette	content_suite storyserver vignette	Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string i…	NVD-CWE-Other	CVE-2003-0400	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307373	-	vignette	content_suite storyserver vignette	Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template.	NVD-CWE-Other	CVE-2003-0401	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307374	-	vignette	content_suite storyserver vignette	The default login template (/vgn/login) in Vignette StoryServer 5 and Vignette V/5 generates different responses whether a user exists or not, which allows remote attackers to identify valid username…	NVD-CWE-Other	CVE-2003-0402	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307375	-	vignette	content_suite storyserver vignette	Vignette StoryServer 5 and Vignette V/5 allows remote attackers to read and modify license information, and cause a denial of service (service halt) by directly accessing the /vgn/license template.	NVD-CWE-Other	CVE-2003-0403	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307376	-	vignette	content_suite storyserver vignette	Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demons…	NVD-CWE-Other	CVE-2003-0404	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307377	-	vignette	content_suite storyserver vignette	Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via (1) an HTTP query or cookie which is processed in the NEEDS command, or (2) an HTTP Referrer that is …	NVD-CWE-Other	CVE-2003-0405	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307378	-	palmvnc	palmvnc	PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with, which could allow attackers to gain privileges.	NVD-CWE-Other	CVE-2003-0406	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307379	-	gnome	batalla_naval	Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.	NVD-CWE-Other	CVE-2003-0407	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

307380	-	the_uptimes_project	upclient	Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument.	NVD-CWE-Other	CVE-2003-0408	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed