Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225941	7.5	危険	TYPO3 Association	-	TYPO3 用の autobeuser エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6459	2012-12-20 19:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

225942	7.5	危険	walnutstreet	-	TYPO3 用の cgswigmore エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6457	2012-12-20 19:10	2009-03-13	Show	GitHub Exploit DB Packet Storm

225943	9.3	危険	quiksoft	-	QuikSoft EasyMail MailStore ActiveX コントロールの emmailstore.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-6447	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

225944	7.5	危険	yourplace	-	YourPlace における脆弱性	CWE-287 不適切な認証	CVE-2008-6445	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

225945	7.5	危険	phpkf	-	phpKF の forum_duzen.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6443	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

225946	5.8	警告	sina	-	Sina Inc. DLoader Class ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	CWE-Other その他	CVE-2008-6442	2012-12-20 19:10	2009-03-9	Show	GitHub Exploit DB Packet Storm

225947	4.3	警告	phpsqlitecms	-	phpSQLiteCMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6435	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

225948	7.5	危険	psychostats	-	PsychoStats における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6422	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

225949	7.5	危険	socialsitegenerator	-	Social Site Generator の social_game_play.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6421	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

225950	5	警告	socialsitegenerator	-	Social Site Generator における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2008-6420	2012-12-20 19:10	2009-03-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314081	-		aol	aim	Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.	CWE-120 Classic Buffer Overflow	CVE-2000-1094	2024-02-9 12:20	2001-01-9	Show	GitHub Exploit DB Packet Storm

314082	-		sendmail netbsd hp windriver sun gentoo oracle	sendmail netbsd hp-ux bsdos sunos linux solaris alphaserver_sc platform_sa	Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the …	CWE-120 Classic Buffer Overflow	CVE-2002-1337	2024-02-9 12:19	2003-03-7	Show	GitHub Exploit DB Packet Storm

314083	-		bsdi sun hp oracle debian ibm freebsd netbsd digital next	bsd_os sunos hp-ux solaris debian_linux aix freebsd netbsd ultrix nextstep	Buffer overflow of rlogin program using TERM environmental variable.	CWE-120 Classic Buffer Overflow	CVE-1999-0046	2024-02-9 12:19	1997-02-6	Show	GitHub Exploit DB Packet Storm

314084	-		terascript	wintango_application_server	Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference.	CWE-120 Classic Buffer Overflow	CVE-2003-0595	2024-02-9 12:18	2003-08-27	Show	GitHub Exploit DB Packet Storm

314085	9.8	CRITICAL Network	anybus	ipc\@chip_firmware	Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password gu…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2001-1339	2024-02-9 12:15	2001-05-24	Show	GitHub Exploit DB Packet Storm

314086	9.8	CRITICAL Network	cgi	script_center_news_update	CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without…	CWE-522 Insufficiently Protected Credentials	CVE-2000-0944	2024-02-9 12:15	2000-12-19	Show	GitHub Exploit DB Packet Storm

314087	9.8	CRITICAL Network	hp	openvms_vax	VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which m…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-1999-1324	2024-02-9 12:15	1999-12-31	Show	GitHub Exploit DB Packet Storm

314088	7.5	HIGH Network	compaq	microcom_6000_firmware	Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force at…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-1999-1152	2024-02-9 12:15	1998-06-3	Show	GitHub Exploit DB Packet Storm

314089	-		pam-pgsql	pam-pgsql	SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.	CWE-89 SQL Injection	CVE-2004-0366	2024-02-9 12:14	2004-05-4	Show	GitHub Exploit DB Packet Storm

314090	-		washington	pine	Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array access using a negat…	CWE-129 Improper Validation of Array Index	CVE-2003-0721	2024-02-9 12:14	2003-09-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed