Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225421 7.5 危険 webjump - Content Management System WEBjump! における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4892 2012-12-20 19:28 2010-06-11 Show GitHub Exploit DB Packet Storm
225422 4.3 警告 retrieve - vBook のログインアプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4890 2012-12-20 19:28 2010-06-11 Show GitHub Exploit DB Packet Storm
225423 6.8 警告 sbuilder - CMS S.Builder の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4887 2012-12-20 19:28 2010-06-11 Show GitHub Exploit DB Packet Storm
225424 7.5 危険 todd rogers - PHPRecipeBook の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4883 2012-12-20 19:28 2010-06-11 Show GitHub Exploit DB Packet Storm
225425 4.3 警告 zonecheck - ZoneCheck の zc/publisher/html.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4882 2012-12-20 19:28 2010-05-26 Show GitHub Exploit DB Packet Storm
225426 6.8 警告 plain black - WebGUI におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4877 2012-12-20 19:28 2010-05-26 Show GitHub Exploit DB Packet Storm
225427 6.4 警告 scripts.oldguy - TalkBack におけるコメントを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4874 2012-12-20 19:28 2010-05-26 Show GitHub Exploit DB Packet Storm
225428 10 危険 rhinosoft - Rhino Software Serv-U Web Client の HTTP サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4873 2012-12-20 19:28 2010-05-26 Show GitHub Exploit DB Packet Storm
225429 7.5 危険 phpcityportal - PHPCityPortal の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4870 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
225430 4.3 警告 tony million - Tuniac におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4867 2012-12-20 19:28 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314761 - sun sunos Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone. NVD-CWE-Other
CVE-1999-0211 2024-02-22 11:15 1994-02-14 Show GitHub Exploit DB Packet Storm
314762 5.5 MEDIUM
Local 		microsoft windows_nt
windows_2000 		NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trai… CWE-59
Link Following 		CVE-2002-0725 2024-02-22 05:38 2002-09-5 Show GitHub Exploit DB Packet Storm
314763 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1709. Reason: This candidate is a duplicate of CVE-2024-1709. Notes: All CVE users should reference CVE-2024-1709 instead of th… - CVE-2024-27215 2024-02-22 03:15 2024-02-22 Show GitHub Exploit DB Packet Storm
314764 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-24475 2024-02-21 10:15 2024-02-21 Show GitHub Exploit DB Packet Storm
314765 - - - Rejected reason: This CVE was misassigned. See CVE-2023-47623 for the canonical reference. - CVE-2024-25113 2024-02-18 07:15 2024-02-18 Show GitHub Exploit DB Packet Storm
314766 4.9 MEDIUM
Network 		- - Rejected reason: ** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue. - CVE-2022-40433 2024-02-17 09:15 2023-08-23 Show GitHub Exploit DB Packet Storm
314767 9.8 CRITICAL
Network 		gaim_project gaim Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be wri… CWE-193
 Off-by-one Error 		CVE-2004-0005 2024-02-17 05:47 2004-03-3 Show GitHub Exploit DB Packet Storm
314768 5.5 MEDIUM
Local 		wftpd_pro_server_project wftpd_pro_server WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 c… CWE-193
 Off-by-one Error 		CVE-2004-0342 2024-02-17 05:44 2004-11-23 Show GitHub Exploit DB Packet Storm
314769 9.8 CRITICAL
Network 		ethereal ethereal Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF,… CWE-193
 Off-by-one Error 		CVE-2003-0356 2024-02-17 05:39 2003-06-9 Show GitHub Exploit DB Packet Storm
314770 7.1 HIGH
Local 		schroepl mod_gzip mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via (1) a symlink attack on pr… CWE-59
Link Following 		CVE-2003-0844 2024-02-17 05:29 2003-11-17 Show GitHub Exploit DB Packet Storm