Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228421 9.3 危険 SopCast - sopocx.ocx の SopCast SopCore ActiveX コントロールにおける任意のプログラムを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0811 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228422 7.5 危険 xatrix - xGuestbook の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0810 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228423 7.5 危険 simple cmms - SimpleCMMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0808 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228424 7.5 危険 zfeeder - zFeeder における管理アクセス権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0807 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228425 5.4 警告 ziproxy - Ziproxy における Flash のアクセスコントロールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0804 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228426 5.4 警告 Smoothwall - SmoothWall Firewall などで使用されている SmoothWall SmoothGuardian における Flash などに対するアクセスコントロールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0803 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228427 5.4 警告 qbik - Qbik WinGate におけるアクセスコントロールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0802 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
228428 5 警告 サン・マイクロシステムズ - OpenJDK などの製品で使用されている Pulse-Java の src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0794 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
228429 4.3 警告 qip - QIP におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0769 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
228430 7.5 危険 yapbb - YapBB の forumhop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0768 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318151 9.8 CRITICAL
Network 		openssl openssl Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 … CWE-415
 Double Free 		CVE-2003-0545 2024-02-3 00:23 2003-11-17 Show GitHub Exploit DB Packet Storm
318152 7.5 HIGH
Network 		gnome gtk Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image. CWE-415
 Double Free 		CVE-2005-0891 2024-02-3 00:22 2005-05-2 Show GitHub Exploit DB Packet Storm
318153 9.8 CRITICAL
Network 		zlib zlib The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow … CWE-415
 Double Free 		CVE-2002-0059 2024-02-3 00:16 2002-03-15 Show GitHub Exploit DB Packet Storm
318154 - linux linux_kernel Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2005-3119 2024-02-3 00:13 2005-10-12 Show GitHub Exploit DB Packet Storm
318155 - mit
redhat
mandrakesoft 		kerberos_ftp_client
linux
mandrake_linux
mandrake_multi_network_firewall 		Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client. CWE-78
OS Command  		CVE-2003-0041 2024-02-3 00:13 2003-02-19 Show GitHub Exploit DB Packet Storm
318156 - apple terminal Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window. CWE-78
OS Command  		CVE-2002-1898 2024-02-3 00:13 2002-12-31 Show GitHub Exploit DB Packet Storm
318157 9.8 CRITICAL
Network 		gaim_project gaim Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a … CWE-131
Incorrect Calculation of Buffer Size 		CVE-2005-2103 2024-02-3 00:02 2005-08-16 Show GitHub Exploit DB Packet Storm
318158 6.5 MEDIUM
Network 		xmlsoft libxml2 libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a cr… CWE-776
XML Entity Expansion 		CVE-2003-1564 2024-02-2 23:10 2003-12-31 Show GitHub Exploit DB Packet Storm
318159 7.8 HIGH
Local 		apache http_server Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables. CWE-131
Incorrect Calculation of Buffer Size 		CVE-2004-0747 2024-02-2 23:03 2004-10-20 Show GitHub Exploit DB Packet Storm
318160 9.8 CRITICAL
Network 		oracle database_server
application_server
e-business_suite
enterprise_manager
enterprise_manager_grid_control
enterprise_manager_database_control
collaboration_suite 		Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed. CWE-131
Incorrect Calculation of Buffer Size 		CVE-2004-1363 2024-02-2 23:01 2004-08-4 Show GitHub Exploit DB Packet Storm