Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226731 9.3 危険 pragyan - Pragyan CMS の cms/modules/form.lib.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3207 2012-12-20 18:52 2008-07-18 Show GitHub Exploit DB Packet Storm
226732 4.3 警告 xomol - Xomol CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3202 2012-12-20 18:52 2008-07-17 Show GitHub Exploit DB Packet Storm
226733 7.8 危険 reSIProcate - ReSIProcate におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-3199 2012-12-20 18:52 2008-07-14 Show GitHub Exploit DB Packet Storm
226734 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3197 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
226735 7.8 危険 yacc - yacc 内の skeleton.c における範囲外メモリのスタックにアクセスされる脆弱性 CWE-399
リソース管理の問題 		CVE-2008-3196 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226736 6.8 警告 TWiki - TWiki の bin/configure におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3195 2012-12-20 18:52 2008-08-5 Show GitHub Exploit DB Packet Storm
226737 6.8 警告 Pluck CMS - pluck の data/inc/themes/predefined_variables.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3194 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226738 7.5 危険 Sclek - jSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3193 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226739 6.8 警告 Sclek - jSite の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3192 2012-12-20 18:52 2008-07-16 Show GitHub Exploit DB Packet Storm
226740 6.8 警告 vclcomponents - Relative Real Estate Systems の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3185 2012-12-20 18:52 2008-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313761 5.5 MEDIUM
Local 		concurrent_versions_software_project concurrent_versions_software Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use… CWE-667
 Improper Locking 		CVE-2000-0338 2024-02-9 04:23 2000-04-23 Show GitHub Exploit DB Packet Storm
313762 5.5 MEDIUM
Local 		qualcomm qpopper qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes. CWE-667
 Improper Locking 		CVE-2000-1198 2024-02-9 04:22 2001-08-31 Show GitHub Exploit DB Packet Storm
313763 9.8 CRITICAL
Network 		gnome
debian 		evolution
debian_linux 		Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte… CWE-190
 Integer Overflow or Wraparound 		CVE-2005-0102 2024-02-9 03:39 2005-01-24 Show GitHub Exploit DB Packet Storm
313764 9.8 CRITICAL
Network 		php
opensuse
suse 		php
opensuse
linux_enterprise 		The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corrupt… CWE-190
 Integer Overflow or Wraparound 		CVE-2010-1866 2024-02-9 03:38 2010-05-8 Show GitHub Exploit DB Packet Storm
313765 9.8 CRITICAL
Network 		qmail_project
canonical
debian 		qmail
ubuntu_linux
debian_linux 		Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly… CWE-190
 Integer Overflow or Wraparound 		CVE-2005-1513 2024-02-9 03:38 2005-05-11 Show GitHub Exploit DB Packet Storm
313766 9.8 CRITICAL
Network 		openbsd
sun
freebsd
microsoft 		openbsd
sunos
solaris
freebsd
windows_nt
windows_xp
windows_2000 		Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code b… CWE-190
 Integer Overflow or Wraparound 		CVE-2002-0391 2024-02-9 03:38 2002-08-12 Show GitHub Exploit DB Packet Storm
313767 9.8 CRITICAL
Network 		optical_character_recognition_project optical_character_recognition Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, wh… CWE-190
 Integer Overflow or Wraparound 		CVE-2005-1141 2024-02-9 03:37 2005-04-15 Show GitHub Exploit DB Packet Storm
313768 9.8 CRITICAL
Network 		openbsd openssh Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is usin… CWE-190
 Integer Overflow or Wraparound 		CVE-2002-0639 2024-02-9 03:37 2002-07-3 Show GitHub Exploit DB Packet Storm
313769 7.8 HIGH
Local 		linux linux_kernel Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which cau… CWE-190
 Integer Overflow or Wraparound 		CVE-2004-2013 2024-02-9 02:59 2004-12-31 Show GitHub Exploit DB Packet Storm
313770 9.8 CRITICAL
Network 		wuftpd
redhat
apple
sun
freebsd
netbsd
openbsd 		wu-ftpd
wu_ftpd
mac_os_x_server
mac_os_x
solaris
freebsd
netbsd
openbsd 		Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via command… CWE-193
 Off-by-one Error 		CVE-2003-0466 2024-02-9 00:50 2003-08-27 Show GitHub Exploit DB Packet Storm