Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
951	5.4	警告 Network	nintex	Nintex Automation	nintexのNintex Automationにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-27924	2026-02-2 19:20	2025-03-10	Show	GitHub Exploit DB Packet Storm

952	9.8	緊急 Network	nintex	Nintex Automation	nintexのNintex Automationにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-27925	2026-02-2 19:20	2025-03-10	Show	GitHub Exploit DB Packet Storm

953	5.3	警告 Network	nintex	Nintex Automation	nintexのNintex Automationにおける複数の脆弱性	CWE-276 CWE-522	CVE-2025-27926	2026-02-2 19:19	2025-03-10	Show	GitHub Exploit DB Packet Storm

954	8.8	重要 Network	NVIDIA	TAO Toolkit	NVIDIAのTAO Toolkitにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2025-33208	2026-02-2 19:19	2025-12-3	Show	GitHub Exploit DB Packet Storm

955	9.8	緊急 Network	Qode Interactive	Dor	Qode InteractiveのWordPress用DorにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-39466	2026-02-2 19:19	2025-11-6	Show	GitHub Exploit DB Packet Storm

956	9.8	緊急 Network	Qode Interactive	Wanderland	Qode InteractiveのWordPress用Wanderlandにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2025-39467	2026-02-2 19:19	2025-11-6	Show	GitHub Exploit DB Packet Storm

957	8.1	重要 Network	Qode Interactive	Backpack Traveler	Qode InteractiveのWordPress用Backpack TravelerにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-39490	2026-02-2 19:19	2025-05-23	Show	GitHub Exploit DB Packet Storm

958	9.8	緊急 Network	Qode Interactive	Wilmer	Qode InteractiveのWordPress用WilmerにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2025-39494	2026-02-2 19:19	2025-05-23	Show	GitHub Exploit DB Packet Storm

959	6.1	警告 Network	IDI Eikon	Governalia	IDI EikonのGovernaliaにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-40700	2026-02-2 19:19	2025-12-2	Show	GitHub Exploit DB Packet Storm

960	6.5	警告 Network	GAMS	access control system	GAMSのaccess control systemにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2025-41086	2026-02-2 19:19	2025-12-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
304791	-	esesix	thintune_extreme thintune_l thintune_m thintune_mobile thintune_s thintune_xm thintune_xs	eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain acc…	NVD-CWE-Other	CVE-2004-2049	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304792	-	esesix	thintune_extreme thintune_l thintune_m thintune_mobile thintune_s thintune_xm thintune_xs	eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshe…	NVD-CWE-Other	CVE-2004-2050	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304793	-	esesix	thintune_extreme thintune_l thintune_m thintune_mobile thintune_s thintune_xm thintune_xs	The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.	NVD-CWE-Other	CVE-2004-2051	2017-07-11 10:31	2004-07-24	Show	GitHub Exploit DB Packet Storm

304794	-	easyins	easyins	PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter.	NVD-CWE-Other	CVE-2004-2053	2017-07-11 10:31	2004-07-24	Show	GitHub Exploit DB Packet Storm

304795	-	phpbb_group	phpbb	CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to …	NVD-CWE-Other	CVE-2004-2054	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304796	-	phpbb_group	phpbb	Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter.	NVD-CWE-Other	CVE-2004-2055	2017-07-11 10:31	2004-07-19	Show	GitHub Exploit DB Packet Storm

304797	-	xlinesoft	asprunner	SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.	NVD-CWE-Other	CVE-2004-2057	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304798	-	xlinesoft	asprunner	ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.	NVD-CWE-Other	CVE-2004-2058	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304799	-	xlinesoft	asprunner	ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable b…	NVD-CWE-Other	CVE-2004-2060	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

304800	-	antiboard	antiboard	SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the (1) thread_id, (2) parent_id, or (3) mode parameters.	NVD-CWE-Other	CVE-2004-2062	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed