Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225911 9 危険 サン・マイクロシステムズ - Sun Java System IdM における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-1082 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225912 4.3 警告 サン・マイクロシステムズ - Sun Java System IdM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1081 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225913 4.3 警告 サン・マイクロシステムズ - Sun Java System IdM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1080 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225914 4.3 警告 サン・マイクロシステムズ - Sun Java System IdM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1079 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225915 4 警告 サン・マイクロシステムズ - Sun Java System IdM における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1078 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225916 6.5 警告 サン・マイクロシステムズ - Sun Java System IdM の Change My Password 実装における他のユーザのパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1077 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225917 5 警告 サン・マイクロシステムズ - Sun Java System Identity Manager IdM における有効なユーザ名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2009-1076 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225918 5 警告 サン・マイクロシステムズ - Sun Java System IdM における有効なユーザ名を列挙される脆弱性 CWE-255
証明書・パスワード管理
CVE-2009-1075 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225919 5 警告 サン・マイクロシステムズ - Sun Java System IdM における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2009-1074 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
225920 9.3 危険 randomsoftware - Icarus におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1071 2012-12-20 19:10 2009-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313931 7.5 HIGH
Network
sendmail sendmail Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced… CWE-416
 Use After Free
CVE-2006-4434 2024-02-16 06:20 2006-08-29 Show GitHub Exploit DB Packet Storm
313932 - microsoft windows_2000
windows_xp
windows_98
windows_nt
windows_server_2003
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads t… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2003-0813 2024-02-16 06:19 2003-11-17 Show GitHub Exploit DB Packet Storm
313933 9.8 CRITICAL
Network
ultimate_php_board_project ultimate_php_board register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account … CWE-178
 Improper Handling of Case Sensitivity
CVE-2002-1820 2024-02-16 06:19 2002-12-31 Show GitHub Exploit DB Packet Storm
313934 - openpkg
trustix
hp
avaya
debian
php
openpkg
secure_linux
hp-ux
converged_communications_server
debian_linux
php
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2004-0594 2024-02-16 06:17 2004-07-27 Show GitHub Exploit DB Packet Storm
313935 7.5 HIGH
Network
pldaniels altermime Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte. CWE-193
 Off-by-one Error
CVE-2002-1721 2024-02-16 06:13 2002-12-31 Show GitHub Exploit DB Packet Storm
313936 7.5 HIGH
Network
hadrons xfstt Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the se… CWE-193
 Off-by-one Error
CVE-2003-0625 2024-02-16 06:12 2003-08-27 Show GitHub Exploit DB Packet Storm
313937 - tcpdump tcpdump Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length t… CWE-125
CWE-191
Out-of-bounds Read
 Integer Underflow (Wrap or Wraparound)
CVE-2004-0184 2024-02-16 06:09 2004-05-4 Show GitHub Exploit DB Packet Storm
313938 - openbsd openbsd isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-… CWE-125
Out-of-bounds Read
CVE-2004-0221 2024-02-16 06:09 2004-05-4 Show GitHub Exploit DB Packet Storm
313939 8.8 HIGH
Network
phpbb phpbb prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) … CWE-665
 Improper Initialization
CVE-2001-1471 2024-02-16 06:06 2001-07-31 Show GitHub Exploit DB Packet Storm
313940 7.5 HIGH
Network
isc
canonical
apple
bind
ubuntu_linux
mac_os_x_server
mac_os_x
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned. CWE-617
 Reachable Assertion
CVE-2006-4095 2024-02-16 06:04 2006-09-6 Show GitHub Exploit DB Packet Storm