Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250141 4.3 警告 GNOME Project - Empathy の theme_adium_append_message 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4170 2011-10-31 10:12 2011-10-23 Show GitHub Exploit DB Packet Storm
250142 4.3 警告 GNOME Project - Empathy の theme_adium_append_message 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3635 2011-10-31 10:11 2011-10-23 Show GitHub Exploit DB Packet Storm
250143 1.2 注意 ヒューレット・パッカード - HP MFP Digital Sending ソフトウェアにおける重要なワークフローメタデータ情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3163 2011-10-31 10:10 2011-10-19 Show GitHub Exploit DB Packet Storm
250144 4.9 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2060 2011-10-31 10:08 2011-10-22 Show GitHub Exploit DB Packet Storm
250145 5 警告 シスコシステムズ - Cisco IOS の ipv6 コンポーネントにおけるフィンガープリンティング攻撃を誘導される脆弱性 CWE-200
情報漏えい 		CVE-2011-2059 2011-10-31 10:07 2011-06-21 Show GitHub Exploit DB Packet Storm
250146 7.8 危険 シスコシステムズ - Cisco IOS の cat6000-dot1x コンポーネントにおけるサービス運用妨害 (トラフィックストーム) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2058 2011-10-31 10:06 2011-10-22 Show GitHub Exploit DB Packet Storm
250147 5 警告 黄昏フロンティア - 東方緋想天におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3995 2011-10-28 12:06 2011-10-28 Show GitHub Exploit DB Packet Storm
250148 10 危険 D-Link Systems, Inc. - 複数の D-Link 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3992 2011-10-28 12:05 2011-10-28 Show GitHub Exploit DB Packet Storm
250149 5.1 警告 FFFTPプロジェクト - FFFTP における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2011-3991 2011-10-28 12:01 2011-10-28 Show GitHub Exploit DB Packet Storm
250150 9 危険 シスコシステムズ - Cisco CiscoWorks Common Services の Home Page コンポーネントにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3310 2011-10-28 11:44 2011-10-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313971 9.8 CRITICAL
Network 		suse suse_linux The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing. CWE-276
Incorrect Default Permissions  		CVE-1999-0426 2024-02-9 00:50 1999-03-1 Show GitHub Exploit DB Packet Storm
313972 7.8 HIGH
Local 		isc bind dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which al… CWE-276
Incorrect Default Permissions  		CVE-2001-0497 2024-02-9 00:49 2001-07-21 Show GitHub Exploit DB Packet Storm
313973 7.5 HIGH
Network 		aol aim The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer under… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2005-1891 2024-02-9 00:44 2005-06-9 Show GitHub Exploit DB Packet Storm
313974 9.8 CRITICAL
Network 		barton ngircd Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2005-0199 2024-02-9 00:43 2005-05-2 Show GitHub Exploit DB Packet Storm
313975 7.5 HIGH
Network 		samba
canonical 		ppp
ubuntu_linux 		Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an inco… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2004-1002 2024-02-9 00:43 2005-03-1 Show GitHub Exploit DB Packet Storm
313976 7.5 HIGH
Network 		linux linux_kernel Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet. CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2004-0816 2024-02-9 00:28 2004-12-23 Show GitHub Exploit DB Packet Storm
313977 9.8 CRITICAL
Network 		symantec liveupdate Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com… CWE-494
 Download of Code Without Integrity Check 		CVE-2001-1125 2024-02-8 11:28 2001-10-5 Show GitHub Exploit DB Packet Storm
313978 9.8 CRITICAL
Network 		phpgedview phpgedview PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modi… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2004-0030 2024-02-8 11:27 2004-01-20 Show GitHub Exploit DB Packet Storm
313979 9.8 CRITICAL
Network 		acme thttpd Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code. CWE-193
 Off-by-one Error 		CVE-2001-1496 2024-02-8 11:19 2001-12-31 Show GitHub Exploit DB Packet Storm
313980 9.8 CRITICAL
Network 		mbedthis appweb_http_server Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters. CWE-178
 Improper Handling of Case Sensitivity 		CVE-2004-2214 2024-02-8 11:12 2004-12-31 Show GitHub Exploit DB Packet Storm