Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230471	5.1	警告	bzip.org アップルサイバートラスト株式会社オラクル VMware レッドハット	-	bzip2 および libbzip2 の BZ2_decompress 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0405	2012-12-17 16:47	2010-09-20	Show	GitHub Exploit DB Packet Storm

230472	5	警告	VMware Apache Software Foundation	-	Apache Tomcat における IP アドレスおよび HTTP ヘッダ情報を意図せず読み取られる脆弱性	CWE-200 情報漏えい	CVE-2011-3375	2012-12-17 16:35	2012-01-19	Show	GitHub Exploit DB Packet Storm

230473	6.8	警告	VMware RPM	-	RPM の headerVerifyInfo 関数におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-189 数値処理の問題	CVE-2012-0815	2012-12-17 16:33	2012-06-4	Show	GitHub Exploit DB Packet Storm

230474	6.8	警告	VMware RPM	-	RPM の headerLoad 関数におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0061	2012-12-17 16:31	2012-06-4	Show	GitHub Exploit DB Packet Storm

230475	7.2	危険	VMware Linux	-	Linux Kernel の robust futex の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0028	2012-12-17 16:28	2012-06-21	Show	GitHub Exploit DB Packet Storm

230476	10	危険	VMware Linux	-	Linux Kernel の CIFSFindNext 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3191	2012-12-17 16:27	2012-05-24	Show	GitHub Exploit DB Packet Storm

230477	6.8	警告	VMware RPM	-	RPM におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0060	2012-12-17 16:26	2012-06-4	Show	GitHub Exploit DB Packet Storm

230478	7.5	危険	Gisle Aas VMware	-	Perl 用の Digest モジュールにおける任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3597	2012-12-17 16:24	2012-01-13	Show	GitHub Exploit DB Packet Storm

230479	4.3	警告	Andy Armstrong VMware レッドハット	-	CGI.pm および CGI::Simple の header 関数における任意のHTTP ヘッダを挿入される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4410	2012-12-17 16:23	2010-12-6	Show	GitHub Exploit DB Packet Storm

230480	4.3	警告	Andy Armstrong レッドハット VMware オラクル	-	CGI.pm および CGI::Simple の multipart_init 関数における任意の HTTP ヘッダを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2761	2012-12-17 16:21	2010-12-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314491	9.8	CRITICAL Network	risearch	risearch risearch_pro	RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, o…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2004-2061	2024-02-9 04:56	2004-07-27	Show	GitHub Exploit DB Packet Storm

314492	9.8	CRITICAL Network	siemens	db4web	DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that sp…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2002-1484	2024-02-9 04:56	2003-04-22	Show	GitHub Exploit DB Packet Storm

314493	7.5	HIGH Network	adobe	acrobat_reader acrobat	The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulne…	CWE-611 XXE	CVE-2005-1306	2024-02-9 04:55	2005-06-15	Show	GitHub Exploit DB Packet Storm

314494	5.5	MEDIUM Local	dump_project	dump	dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.	CWE-667 Improper Locking	CVE-2002-1914	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

314495	5.5	MEDIUM Local	openbsd netbsd freebsd	openbsd netbsd freebsd	tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.	CWE-667 Improper Locking	CVE-2002-1915	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

314496	7.8	HIGH Local	microsoft	windows_2000	Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.	CWE-667 Improper Locking	CVE-2002-0051	2024-02-9 04:24	2002-04-4	Show	GitHub Exploit DB Packet Storm

314497	5.5	MEDIUM Local	concurrent_versions_software_project	concurrent_versions_software	Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use…	CWE-667 Improper Locking	CVE-2000-0338	2024-02-9 04:23	2000-04-23	Show	GitHub Exploit DB Packet Storm

314498	5.5	MEDIUM Local	qualcomm	qpopper	qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.	CWE-667 Improper Locking	CVE-2000-1198	2024-02-9 04:22	2001-08-31	Show	GitHub Exploit DB Packet Storm

314499	9.8	CRITICAL Network	gnome debian	evolution debian_linux	Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte…	CWE-190 Integer Overflow or Wraparound	CVE-2005-0102	2024-02-9 03:39	2005-01-24	Show	GitHub Exploit DB Packet Storm

314500	9.8	CRITICAL Network	php opensuse suse	php opensuse linux_enterprise	The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corrupt…	CWE-190 Integer Overflow or Wraparound	CVE-2010-1866	2024-02-9 03:38	2010-05-8	Show	GitHub Exploit DB Packet Storm