Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226661	7.2	危険	VMware	-	複数の VMware 製品の VMCI の実装における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1406	2013-02-13 15:42	2013-02-7	Show	GitHub Exploit DB Packet Storm

226662	7.5	危険	CubeCart Limited	-	CubeCart における任意の PHP オブジェクトをアンシリアライズされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-1465	2013-02-13 11:53	2013-01-31	Show	GitHub Exploit DB Packet Storm

226663	-	-	ARM Ltd. (旧 Offspark)	-	削除 PolarSSL の SSL モジュールにおける識別攻撃を誘発される脆弱性	-	CVE-2013-1622	2013-02-13 11:49	2013-02-2	Show	GitHub Exploit DB Packet Storm

226664	6.8	警告	Opera Software ASA	-	Opera における CSRF 保護メカニズムを回避される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-1639	2013-02-12 16:51	2013-01-30	Show	GitHub Exploit DB Packet Storm

226665	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1638	2013-02-12 16:49	2013-01-30	Show	GitHub Exploit DB Packet Storm

226666	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1637	2013-02-12 16:48	2013-01-30	Show	GitHub Exploit DB Packet Storm

226667	9.3	危険	Ecava	-	IntegraXor SCADA Server におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4700	2013-02-12 14:26	2013-01-3	Show	GitHub Exploit DB Packet Storm

226668	5	警告	ISC, Inc. 日本電気 VMware	-	複数の DNS ネームサーバの実装に問題	CWE-DesignError	CVE-2012-1033	2013-02-8 16:14	2012-02-9	Show	GitHub Exploit DB Packet Storm

226669	8.5	危険	（複数のベンダ）	-	HP/H3C 製および Huawei 製ネットワーク機器にアクセス制限不備の脆弱性	CWE-200 情報漏えい	CVE-2012-3268	2013-02-8 15:02	2012-10-25	Show	GitHub Exploit DB Packet Storm

226670	2.6	注意	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0702	2013-02-8 12:01	2013-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318231	-		proftpd mandrakesoft debian conectiva	proftpd mandrake_linux debian_linux linux	Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2001-0136	2024-01-27 03:53	2001-03-12	Show	GitHub Exploit DB Packet Storm

318232	5.8	MEDIUM Network	chillcreations	com_ccnewsletter	Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in …	CWE-22 Path Traversal	CVE-2010-0467	2024-01-27 02:44	2010-02-3	Show	GitHub Exploit DB Packet Storm

318233	9.8	CRITICAL Network	debian canonical	lintian debian_linux ubuntu_linux	Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive i…	CWE-22 Path Traversal	CVE-2009-4013	2024-01-27 02:44	2010-02-3	Show	GitHub Exploit DB Packet Storm

318234	7.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.	CWE-178 Improper Handling of Case Sensitivity	CVE-2000-0497	2024-01-27 02:43	2000-06-8	Show	GitHub Exploit DB Packet Storm

318235	7.5	HIGH Network	unify	ewave_servletexec	Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.	CWE-178 Improper Handling of Case Sensitivity	CVE-2000-0498	2024-01-27 02:43	2000-06-8	Show	GitHub Exploit DB Packet Storm

318236	7.5	HIGH Network	bea	weblogic_server	The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.	CWE-178 Improper Handling of Case Sensitivity	CVE-2000-0499	2024-01-27 02:43	2000-06-8	Show	GitHub Exploit DB Packet Storm

318237	7.1	HIGH Local	iss	blackice_server_protection blackice_pc_protection	BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2004-1714	2024-01-27 02:21	2004-08-11	Show	GitHub Exploit DB Packet Storm

318238	7.0	HIGH Local	symantec	antivirus_scan_engine	The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUp…	CWE-59 Link Following	CVE-2004-0217	2024-01-27 02:21	2004-04-15	Show	GitHub Exploit DB Packet Storm

318239	5.5	MEDIUM Local	mgetty_project	mgetty	faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files.	CWE-59 Link Following	CVE-2003-0517	2024-01-27 02:20	2003-08-18	Show	GitHub Exploit DB Packet Storm

318240	7.8	HIGH Local	ibm	u2_universe	cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.	CWE-59 Link Following	CVE-2003-0578	2024-01-27 02:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed