Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225321	5.2	警告	Linux	-	Linux Kernel の Xen netback 機能におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0217	2013-02-19 16:48	2013-02-14	Show	GitHub Exploit DB Packet Storm

225322	2.1	注意	Linux	-	Linux Kernel の fs/binfmt_script.c の load_script 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-4530	2013-02-19 16:46	2013-01-11	Show	GitHub Exploit DB Packet Storm

225323	4.9	警告	Linux	-	Linux Kernel の kernel/kmod.c の __request_module 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4398	2013-02-19 16:45	2013-02-18	Show	GitHub Exploit DB Packet Storm

225324	6.8	警告	ヒューレット・パッカード	-	HP ArcSight Connector Appliance および ArcSight Logger における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-5199	2013-02-19 16:42	2013-02-14	Show	GitHub Exploit DB Packet Storm

225325	5	警告	ヒューレット・パッカード	-	HP ArcSight Connector Appliance および ArcSight Logger における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5198	2013-02-19 16:41	2013-02-14	Show	GitHub Exploit DB Packet Storm

225326	6.5	警告	ヒューレット・パッカード	-	HP ArcSight Connector Appliance および ArcSight Logger における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-3286	2013-02-19 16:41	2013-02-14	Show	GitHub Exploit DB Packet Storm

225327	6.8	警告	シスコシステムズ	-	Cisco Unity Express におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-1120	2013-02-18 17:18	2013-02-1	Show	GitHub Exploit DB Packet Storm

225328	4.3	警告	libssh	-	libssh の publickey_from_privatekey 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0176	2013-02-18 17:15	2013-01-13	Show	GitHub Exploit DB Packet Storm

225329	10	危険	VMware	-	複数の VMware 製品における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2013-1405	2013-02-18 16:11	2013-01-31	Show	GitHub Exploit DB Packet Storm

225330	4.3	警告	シスコシステムズ	-	Cisco Unified MeetingPlace のサーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1123	2013-02-18 16:09	2013-02-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
316941	-		guillaumegardey	biborb	Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. (dot dot) sequences in the…	CWE-22 Path Traversal	CVE-2005-0253	2024-02-3 01:50	2005-05-2	Show	GitHub Exploit DB Packet Storm

316942	-		guillaumegardey	biborb	BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2005-0254	2024-02-3 01:44	2005-05-2	Show	GitHub Exploit DB Packet Storm

316943	-		guillaumegardey	biborb	Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter.	CWE-79 Cross-site Scripting	CVE-2005-0251	2024-02-3 01:42	2005-05-2	Show	GitHub Exploit DB Packet Storm

316944	7.0	HIGH Local	linux opensuse suse debian	linux_kernel opensuse linux_enterprise_server linux_enterprise_desktop linux_enterprise_high_availability_extension debian_linux	Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2010-1437	2024-02-3 01:38	2010-05-8	Show	GitHub Exploit DB Packet Storm

316945	-		postgresql trustix mandrakesoft redhat	postgresql secure_linux mandrake_linux_corporate_server enterprise_linux_desktop enterprise_linux mandrake_linux	The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2004-0977	2024-02-3 01:33	2005-02-9	Show	GitHub Exploit DB Packet Storm

316946	9.8	CRITICAL Network	mit openpkg debian	kerberos_5 openpkg debian_linux	Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.	CWE-415 Double Free	CVE-2004-0772	2024-02-3 00:27	2004-10-20	Show	GitHub Exploit DB Packet Storm

316947	-		mit debian redhat	kerberos_5 debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server	Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow…	CWE-415 Double Free	CVE-2004-0642	2024-02-3 00:27	2004-09-28	Show	GitHub Exploit DB Packet Storm

316948	9.8	CRITICAL Network	mit apple debian	kerberos_5 mac_os_x_server mac_os_x debian_linux	Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.	CWE-415 Double Free	CVE-2005-1689	2024-02-3 00:24	2005-07-18	Show	GitHub Exploit DB Packet Storm

316949	7.8	HIGH Local	microsoft	outlook internet_explorer windows_xp windows_server_2003 windows_98 windows_me windows_98se windows_nt	Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.	CWE-415 Double Free	CVE-2003-1048	2024-02-3 00:23	2004-07-27	Show	GitHub Exploit DB Packet Storm

316950	9.8	CRITICAL Network	openssl	openssl	Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 …	CWE-415 Double Free	CVE-2003-0545	2024-02-3 00:23	2003-11-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed