Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
901 9.8 緊急
Network
ToDesktop ToDesktop Builder ToDesktopのToDesktop Builderにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2025-67229 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
902 7.1 重要
Network
ToDesktop ToDesktop Builder ToDesktopのToDesktop Builderにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2025-67230 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
903 5.9 警告
Network
ToDesktop ToDesktop Builder ToDesktopのToDesktop Builderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-67231 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
904 9.8 緊急
Network
remyandrade Modern Image Gallery App Using PHP and MySQL with Source Code Remy AndradeのModern Image Gallery App Using PHP and MySQL with Source Codeにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2025-70457 2026-02-2 19:22 2026-01-23 Show GitHub Exploit DB Packet Storm
905 8.1 重要
Network
オートデスク株式会社 Autodesk Fusion オートデスク株式会社のAutodesk Fusionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-0533 2026-02-2 19:22 2026-01-22 Show GitHub Exploit DB Packet Storm
906 8.1 重要
Network
オートデスク株式会社 Autodesk Fusion オートデスク株式会社のAutodesk Fusionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-0534 2026-02-2 19:21 2026-01-22 Show GitHub Exploit DB Packet Storm
907 8.1 重要
Network
オートデスク株式会社 Autodesk Fusion オートデスク株式会社のAutodesk Fusionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-0535 2026-02-2 19:21 2026-01-22 Show GitHub Exploit DB Packet Storm
908 6 警告
Local
Amazon.com, Inc. Firecracker Amazon.com, Inc.のFirecrackerにおけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー
CVE-2026-1386 2026-02-2 19:21 2026-01-23 Show GitHub Exploit DB Packet Storm
909 5.4 警告
Network
Stack Ideas Private Limited. EasyDiscuss Stack Ideas Private Limited.のEasyDiscussにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-21624 2026-02-2 19:21 2026-01-16 Show GitHub Exploit DB Packet Storm
910 8.8 重要
Network
Stack Ideas Private Limited. EasyDiscuss Stack Ideas Private Limited.のEasyDiscussにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2026-21625 2026-02-2 19:21 2026-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
304851 - cvsup cvsup Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by ca… NVD-CWE-Other
CVE-2004-2133 2017-07-11 10:31 2004-01-29 Show GitHub Exploit DB Packet Storm
304852 - microsoft outlook_express Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fiel… NVD-CWE-Other
CVE-2004-2137 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304853 - jorg_schilling sdd Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has unknown impact and attack vectors. NVD-CWE-Other
CVE-2004-2142 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304854 - mambo mambo_portal SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in th… NVD-CWE-Other
CVE-2004-2143 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304855 - pd9_software megabbs SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memb… NVD-CWE-Other
CVE-2004-2145 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304856 - pd9_software megabbs CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp. NVD-CWE-Other
CVE-2004-2146 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304857 - slava_astashonok fprobe Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors. NVD-CWE-Other
CVE-2004-2148 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304858 - virtual_projects chatman Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via a very large data size. NVD-CWE-Other
CVE-2004-2151 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304859 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML. NVD-CWE-Other
CVE-2004-2152 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
304860 - real_estate_management_software real_estate_management_software Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors. NVD-CWE-Other
CVE-2004-2153 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm