Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225581 4.3 警告 Shawn Bradley - PHP Volunteer Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6505 2013-01-25 14:20 2013-01-24 Show GitHub Exploit DB Packet Storm
225582 7.5 危険 Shawn Bradley - PHP Volunteer Management における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-6504 2013-01-25 14:20 2013-01-24 Show GitHub Exploit DB Packet Storm
225583 10 危険 Ninja Forge - Joomla! 用 NinjaXplorer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-6503 2013-01-25 14:19 2012-04-26 Show GitHub Exploit DB Packet Storm
225584 5.8 警告 GNU Project - GnuPG の g10/import.c における公開鍵リングのデータベースを破壊される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6085 2013-01-25 14:18 2012-12-6 Show GitHub Exploit DB Packet Storm
225585 4.3 警告 Cenango Financial LLC - WikidForum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2099 2013-01-25 14:17 2012-04-12 Show GitHub Exploit DB Packet Storm
225586 6.8 警告 Sitecom - Sitecom WLM-2501 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1922 2013-01-25 14:16 2013-01-24 Show GitHub Exploit DB Packet Storm
225587 4.3 警告 Simple Realty Themes - WordPress 用 Advanced Text Widget プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4618 2013-01-25 14:15 2013-01-24 Show GitHub Exploit DB Packet Storm
225588 4.3 警告 IBM - WebSphere Application Server (WAS) におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2013-01-25 12:01 2013-01-25 Show GitHub Exploit DB Packet Storm
225589 2.1 注意 MySQL AB - MySQL における権限チェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4452 2013-01-24 17:39 2012-10-9 Show GitHub Exploit DB Packet Storm
225590 4 警告 Jan Kara - Linux DiskQuota における hosts.deny の TCP Wrapper ルールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3417 2013-01-24 17:36 2012-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347571 - efax efax Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. NVD-CWE-Other
CVE-2002-0130 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347572 - activestate activepython ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attacke… NVD-CWE-Other
CVE-2002-0131 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347573 - avirt avirt_gateway
avirt_gateway_suite
avirt_soho 		Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string … NVD-CWE-Other
CVE-2002-0133 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347574 - avirt avirt_gateway_suite Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitra… NVD-CWE-Other
CVE-2002-0134 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347575 - andreas_mueller cdrdao CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file. NVD-CWE-Other
CVE-2002-0137 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347576 - andreas_mueller cdrdao CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command. NVD-CWE-Other
CVE-2002-0138 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347577 - pi3 pi3web CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long an… NVD-CWE-Other
CVE-2002-0142 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347578 - cisco secure_access_control_server Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash… CWE-134
Use of Externally-Controlled Format String 		CVE-2002-0159 2016-10-18 11:16 2002-04-22 Show GitHub Exploit DB Packet Storm
347579 - cisco secure_access_control_server The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image fil… NVD-CWE-Other
CVE-2002-0160 2016-10-18 11:16 2002-04-22 Show GitHub Exploit DB Packet Storm
347580 - logwatch logwatch LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory. NVD-CWE-Other
CVE-2002-0162 2016-10-18 11:16 2002-03-27 Show GitHub Exploit DB Packet Storm