Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225701 5.8 警告 Apache Software Foundation - Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 - CVE-2012-5633 2013-03-25 16:00 2012-11-14 Show GitHub Exploit DB Packet Storm
225702 7.5 危険 tg0 - Ruby 用 Curl Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2617 2013-03-25 14:21 2013-03-12 Show GitHub Exploit DB Packet Storm
225703 7.5 危険 Hampton Catlin - Ruby 用 MiniMagick Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2616 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
225704 7.5 危険 Daniel Choi - Ruby 用 fastreader Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2615 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
225705 7.5 危険 Stefaan Colman - Ruby 用 command_wrap Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1875 2013-03-25 14:19 2013-03-18 Show GitHub Exploit DB Packet Storm
225706 6.2 警告 Schweitzer Engineering Laboratories - Schweitzer Engineering Laboratories の AcSELerator QuickSet における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0665 2013-03-25 14:12 2013-03-20 Show GitHub Exploit DB Packet Storm
225707 4.3 警告 シーメンス - Siemens WinCC の HMI Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0667 2013-03-25 11:35 2013-03-15 Show GitHub Exploit DB Packet Storm
225708 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1750 2013-03-22 16:20 2013-03-15 Show GitHub Exploit DB Packet Storm
225709 2.1 注意 Mathijs Koenraadt - Drupal 用 Search API Sorts モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0227 2013-03-22 16:16 2013-01-23 Show GitHub Exploit DB Packet Storm
225710 6 警告 Ivan Zugec - Drupal 用 Keyboard Shortcut Utility モジュールにおけるノードを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0226 2013-03-22 16:16 2013-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317601 - - - Rejected reason: Red Hat Product Security does not consider this to be a vulnerability. Upstream has not acknowledged this issue as a security flaw. - CVE-2022-0931 2024-02-9 08:15 2024-02-9 Show GitHub Exploit DB Packet Storm
317602 6.5 MEDIUM
Network 		helpcenterlive help_center_live Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php. CWE-352
 Origin Validation Error 		CVE-2005-1674 2024-02-9 05:47 2005-05-19 Show GitHub Exploit DB Packet Storm
317603 7.5 HIGH
Network 		cisco ios Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS)… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2002-1706 2024-02-9 05:47 2002-12-31 Show GitHub Exploit DB Packet Storm
317604 7.8 HIGH
Local 		hp chaivm_ezloader ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2002-1796 2024-02-9 05:47 2002-12-31 Show GitHub Exploit DB Packet Storm
317605 7.5 HIGH
Network 		microsoft windows_nt
windows_2000 		By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS re… CWE-346
 Origin Validation Error 		CVE-2001-1452 2024-02-9 05:47 2001-08-31 Show GitHub Exploit DB Packet Storm
317606 9.8 CRITICAL
Network 		microsoft windows_nt
windows_xp
windows_2000
windows_98
windows_98se 		The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts th… CWE-346
 Origin Validation Error 		CVE-2000-1218 2024-02-9 05:47 2000-04-14 Show GitHub Exploit DB Packet Storm
317607 7.5 HIGH
Network 		thekelleys dnsmasq Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. CWE-346
 Origin Validation Error 		CVE-2005-0877 2024-02-9 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
317608 8.8 HIGH
Network 		phpnuke php-nuke Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php. CWE-352
 Origin Validation Error 		CVE-2004-1842 2024-02-9 05:46 2004-12-31 Show GitHub Exploit DB Packet Storm
317609 6.5 MEDIUM
Network 		fusetalk fusetalk Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm. CWE-352
 Origin Validation Error 		CVE-2004-1995 2024-02-9 05:46 2004-12-31 Show GitHub Exploit DB Packet Storm
317610 8.8 HIGH
Network 		fusionphp fusion_news Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is … CWE-352
 Origin Validation Error 		CVE-2004-1703 2024-02-9 05:46 2004-07-30 Show GitHub Exploit DB Packet Storm