Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228071 3.5 注意 sql-ledger - SQL-Ledger におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3581 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228072 6.8 警告 sql-ledger - SQL-Ledger の am.pl におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3580 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228073 10 危険 tatsuhiro tsujikawa - aria の DHTRoutingTableDeserializer.cc におけるバッファオーバーフローの脆弱性 CWE-noinfo
情報不足 		CVE-2009-3575 2012-12-20 19:28 2009-10-7 Show GitHub Exploit DB Packet Storm
228074 9.3 危険 tony million - Tuniac におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-3574 2012-12-20 19:28 2009-10-6 Show GitHub Exploit DB Packet Storm
228075 2.6 注意 xerver - Xerver HTTP Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3562 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
228076 5 警告 xerver - Xerver HTTP Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3561 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
228077 2.1 注意 レッドハット - Red Hat JBoss Enterprise Application Platform の Twiddle における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3554 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
228078 5 警告 Wireshark - Wireshark の SMB 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-3551 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
228079 5 警告 Wireshark - Wireshark の Paltalk 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3549 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
228080 5 警告 xerver - Xerver HTTP Server における Web ページに対するソースコードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3544 2012-12-20 19:28 2009-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318131 7.1 HIGH
Local 		schroepl mod_gzip mod_gzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via (1) a symlink attack on pr… CWE-59
Link Following 		CVE-2003-0844 2024-02-17 05:29 2003-11-17 Show GitHub Exploit DB Packet Storm
318132 9.8 CRITICAL
Network 		pedestalsoftware integrity_protection_driver Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier allows privileged attackers, such as rootkits, to bypass file access restrictions to the Windows kernel by using the NtCreateSymbol… CWE-59
Link Following 		CVE-2003-1233 2024-02-17 04:01 2003-12-31 Show GitHub Exploit DB Packet Storm
318133 - - - Rejected reason: Erroneous assignement - CVE-2024-1515 2024-02-17 03:15 2024-02-17 Show GitHub Exploit DB Packet Storm
318134 - - - Rejected reason: Erroneous assignment - CVE-2024-1444 2024-02-17 02:15 2024-02-17 Show GitHub Exploit DB Packet Storm
318135 7.5 HIGH
Network 		ethereal
debian 		ethereal
debian_linux 		SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL poin… CWE-476
 NULL Pointer Dereference 		CVE-2002-0401 2024-02-17 02:07 2002-06-18 Show GitHub Exploit DB Packet Storm
318136 7.5 HIGH
Network 		linux linux_kernel xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the name_index fields when sharing xattr blocks, which could prevent default ACLs from being applied. CWE-697
 Incorrect Comparison 		CVE-2005-2801 2024-02-17 01:53 2005-09-7 Show GitHub Exploit DB Packet Storm
318137 9.8 CRITICAL
Network 		freebsd freebsd TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass … CWE-863
 Incorrect Authorization 		CVE-2001-1155 2024-02-17 01:51 2001-08-23 Show GitHub Exploit DB Packet Storm
318138 5.5 MEDIUM
Local 		openbsd openbsd The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial… CWE-476
 NULL Pointer Dereference 		CVE-2001-1559 2024-02-16 23:16 2001-12-31 Show GitHub Exploit DB Packet Storm
318139 7.1 HIGH
Local 		ibm db2_universal_database Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, s… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2005-4868 2024-02-16 23:10 2005-12-31 Show GitHub Exploit DB Packet Storm
318140 7.5 HIGH
Network 		microsoft windows_xp
windows_2000
windows_server_2003 		The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or ex… CWE-476
 NULL Pointer Dereference 		CVE-2004-0119 2024-02-16 06:44 2004-06-1 Show GitHub Exploit DB Packet Storm