Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228521 10 危険 w3 - W3C Amaya Web Browser におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0323 2012-12-20 19:10 2009-01-28 Show GitHub Exploit DB Packet Storm
228522 6.9 警告 XChat - xchat の Python モジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2009-0315 2012-12-20 19:10 2009-01-28 Show GitHub Exploit DB Packet Storm
228523 4.3 警告 webhelpdesk - Web Help Desk におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-0303 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
228524 6.8 警告 webmobo - WB News における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-0294 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
228525 7.5 危険 wazzum - Wazzum Dating Software の profile_view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0293 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
228526 7.5 危険 shop-inet - SHOP-INET の show_cat2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0292 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
228527 6.8 警告 SIR - SIR GNUBoard の common.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-0290 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
228528 5 警告 windows tftp utility - k23productions TFTPUtil GUI におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-0289 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
228529 5 警告 windows tftp utility - k23productions TFTPUtil GUI におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-0288 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
228530 7.5 危険 KEEP Toolkit - KEEP Toolkit の lib/patUser.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0287 2012-12-20 19:10 2009-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318071 - openpkg
libpng
redhat
trustix
openpkg
libpng
secure_linux
enterprise_linux_desktop
enterprise_linux
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bou… CWE-125
Out-of-bounds Read
CVE-2004-0421 2024-02-9 09:27 2004-08-18 Show GitHub Exploit DB Packet Storm
318072 7.8 HIGH
Local
freebsd freebsd FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cau… CWE-909
 Missing Initialization of Resource
CVE-2005-1036 2024-02-9 08:47 2005-05-2 Show GitHub Exploit DB Packet Storm
318073 - - - Rejected reason: Red Hat Product Security does not consider this to be a vulnerability. Upstream has not acknowledged this issue as a security flaw. - CVE-2022-0931 2024-02-9 08:15 2024-02-9 Show GitHub Exploit DB Packet Storm
318074 6.5 MEDIUM
Network
helpcenterlive help_center_live Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php. CWE-352
 Origin Validation Error
CVE-2005-1674 2024-02-9 05:47 2005-05-19 Show GitHub Exploit DB Packet Storm
318075 7.5 HIGH
Network
cisco ios Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS)… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2002-1706 2024-02-9 05:47 2002-12-31 Show GitHub Exploit DB Packet Storm
318076 7.8 HIGH
Local
hp chaivm_ezloader ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2002-1796 2024-02-9 05:47 2002-12-31 Show GitHub Exploit DB Packet Storm
318077 7.5 HIGH
Network
microsoft windows_nt
windows_2000
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS re… CWE-346
 Origin Validation Error
CVE-2001-1452 2024-02-9 05:47 2001-08-31 Show GitHub Exploit DB Packet Storm
318078 9.8 CRITICAL
Network
microsoft windows_nt
windows_xp
windows_2000
windows_98
windows_98se
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts th… CWE-346
 Origin Validation Error
CVE-2000-1218 2024-02-9 05:47 2000-04-14 Show GitHub Exploit DB Packet Storm
318079 7.5 HIGH
Network
thekelleys dnsmasq Dnsmasq before 2.21 allows remote attackers to poison the DNS cache via answers to queries that were not made by Dnsmasq. CWE-346
 Origin Validation Error
CVE-2005-0877 2024-02-9 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
318080 8.8 HIGH
Network
phpnuke php-nuke Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php. CWE-352
 Origin Validation Error
CVE-2004-1842 2024-02-9 05:46 2004-12-31 Show GitHub Exploit DB Packet Storm