Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224601 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2427 2013-08-12 17:25 2013-04-16 Show GitHub Exploit DB Packet Storm
224602 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2428 2013-08-12 17:24 2013-04-16 Show GitHub Exploit DB Packet Storm
224603 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における JavaFX の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2414 2013-08-12 17:22 2013-04-16 Show GitHub Exploit DB Packet Storm
224604 10 危険 オラクル - Oracle Java SE の Java Runtime Environment における Install の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2425 2013-08-12 16:54 2013-04-16 Show GitHub Exploit DB Packet Storm
224605 6.8 警告 Shareaholic - WordPress 用 Shareaholic SexyBookmarks プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3256 2013-08-12 12:25 2013-08-1 Show GitHub Exploit DB Packet Storm
224606 10 危険 シスコシステムズ - 複数の Cisco TelePresence System デバイス上で稼働する Cisco TelePresence System Software における設定を変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-3454 2013-08-12 12:24 2013-08-7 Show GitHub Exploit DB Packet Storm
224607 6.8 警告 サイバートラスト株式会社
ProFTPD Project
ターボリナックス
レッドハット		 - 複数の STARTTLS 実装に脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0411 2013-08-9 18:20 2011-03-8 Show GitHub Exploit DB Packet Storm
224608 10 危険 オラクル - Oracle Java SE および JavaFX の Java Runtime Environment における 2D の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-2434 2013-08-9 17:53 2013-04-16 Show GitHub Exploit DB Packet Storm
224609 6.5 警告 Huawei - 複数の Huawei 製品における平文パスワードを取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-4960 2013-08-9 16:41 2012-12-17 Show GitHub Exploit DB Packet Storm
224610 5.4 警告 Mozilla Foundation - 複数の Mozilla 製品における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1717 2013-08-8 15:50 2013-08-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350501 - macromedia coldfusion Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuratio… NVD-CWE-Other
CVE-2005-4344 2011-03-8 11:28 2005-12-19 Show GitHub Exploit DB Packet Storm
350502 - macromedia coldfusion Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges. NVD-CWE-Other
CVE-2005-4345 2011-03-8 11:28 2005-12-19 Show GitHub Exploit DB Packet Storm
350503 - sun wbem_services Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via… NVD-CWE-Other
CVE-2005-4350 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
350504 - toenda_software_development toendacms SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2005-4353 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
350505 - - - Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter. NVD-CWE-Other
CVE-2005-4354 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
350506 - xmpie ustore Multiple cross-site scripting (XSS) vulnerabilities in UStore allow remote attackers to inject arbitrary web script or HTML via the (1) Cat parameter in default.asp and the (2) accessdenied parameter… NVD-CWE-Other
CVE-2005-4355 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
350507 - xmpie ustore SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. NOTE: the provenance of this information is unknown; the… NVD-CWE-Other
CVE-2005-4356 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
350508 - oodie odfaq SQL injection vulnerability in includes/core.inc.php in ODFaq 2.1.0 allows remote attackers to execute arbitrary SQL commands via the (1) cat and (2) srcText parameters to faq.php. NVD-CWE-Other
CVE-2005-4359 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
350509 - magnolia content_management_suite Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter. NVD-CWE-Other
CVE-2005-4361 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm
350510 - komodo komodo_cms SQL injection vulnerability in page.php in Komodo CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. NVD-CWE-Other
CVE-2005-4362 2011-03-8 11:28 2005-12-20 Show GitHub Exploit DB Packet Storm