Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226831 5.8 警告 GNU Project - GnuPG の g10/import.c における公開鍵リングのデータベースを破壊される脆弱性 CWE-20
不適切な入力確認
CVE-2012-6085 2013-01-25 14:18 2012-12-6 Show GitHub Exploit DB Packet Storm
226832 4.3 警告 Cenango Financial LLC - WikidForum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2099 2013-01-25 14:17 2012-04-12 Show GitHub Exploit DB Packet Storm
226833 6.8 警告 Sitecom - Sitecom WLM-2501 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1922 2013-01-25 14:16 2013-01-24 Show GitHub Exploit DB Packet Storm
226834 4.3 警告 Simple Realty Themes - WordPress 用 Advanced Text Widget プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4618 2013-01-25 14:15 2013-01-24 Show GitHub Exploit DB Packet Storm
226835 4.3 警告 IBM - WebSphere Application Server (WAS) におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2013-01-25 12:01 2013-01-25 Show GitHub Exploit DB Packet Storm
226836 2.1 注意 MySQL AB - MySQL における権限チェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4452 2013-01-24 17:39 2012-10-9 Show GitHub Exploit DB Packet Storm
226837 4 警告 Jan Kara - Linux DiskQuota における hosts.deny の TCP Wrapper ルールを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3417 2013-01-24 17:36 2012-08-13 Show GitHub Exploit DB Packet Storm
226838 7.5 危険 シックス・アパート株式会社 - Movable Type の mt-upgrade.cgi における eval インジェクションおよび SQL インジェクションの脆弱性 CWE-287
不適切な認証
CVE-2013-0209 2013-01-24 14:48 2013-01-7 Show GitHub Exploit DB Packet Storm
226839 7.5 危険 Nagios Enterprises, LLC
The Icinga Project
- Nagios Core の history.cgi におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-6096 2013-01-24 14:47 2013-01-12 Show GitHub Exploit DB Packet Storm
226840 1.5 注意 シトリックス・システムズ
Apache Software Foundation
- Apache CloudStack および Citrix CloudPlatform における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-5616 2013-01-24 14:46 2013-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346401 - skintech phpnewsmanager Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter. NVD-CWE-Other
CVE-2004-0327 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346402 - gigabyte gn-b46b Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a … NVD-CWE-Other
CVE-2004-0328 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346403 - freechat freechat FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonstrated using "aaaaa". NVD-CWE-Other
CVE-2004-0329 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346404 - dell openmanage Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable. NVD-CWE-Other
CVE-2004-0331 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346405 - extremail extremail Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges. NVD-CWE-Other
CVE-2004-0332 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346406 - openpkg
uudeview
winzip
gentoo
openpkg
uudeview
winzip
linux
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain … NVD-CWE-Other
CVE-2004-0333 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346407 - openpkg
uudeview
winzip
gentoo
openpkg
uudeview
winzip
linux
This was fixed in WinZip 8.1 SR-2 in March of 2004. You can find more information on the subject on the following pages of the winzip site: http://www.winzip.com/wz81sr2.htm http://www.winzip.com/f… NVD-CWE-Other
CVE-2004-0333 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346408 - innomedia innomedia_videophone InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videoph… NVD-CWE-Other
CVE-2004-0334 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346409 - software602 602pro_lan_suite LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) u… NVD-CWE-Other
CVE-2004-0335 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
346410 - software602 602pro_lan_suite Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and t… NVD-CWE-Other
CVE-2004-0337 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm