Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250471 6.8 警告 Jaspersoft - JasperServer にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1911 2011-09-22 15:54 2011-09-16 Show GitHub Exploit DB Packet Storm
250472 7.5 危険 LifeSize Communications - LifeSize Room appliance の Web インターフェイスにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2763 2011-09-22 15:50 2011-09-2 Show GitHub Exploit DB Packet Storm
250473 5 警告 LifeSize Communications - LifeSize Room appliance の Web インターフェイスにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-2762 2011-09-22 15:49 2011-09-2 Show GitHub Exploit DB Packet Storm
250474 7.5 危険 Myrephp Programming - MYRE Real Estate Software の findagent.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3394 2011-09-21 15:52 2011-09-15 Show GitHub Exploit DB Packet Storm
250475 4.3 警告 Myrephp Programming - MYRE Real Estate Software の findagent.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3393 2011-09-21 15:51 2011-09-15 Show GitHub Exploit DB Packet Storm
250476 10 危険 Scadatec Limited - Scadatec Limited Procyon SCADA におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3322 2011-09-21 15:51 2011-09-15 Show GitHub Exploit DB Packet Storm
250477 2.1 注意 シスコシステムズ - Cisco VPN client for Windows の StartServiceCtrlDispatcher 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-4118 2011-09-21 15:50 2009-11-19 Show GitHub Exploit DB Packet Storm
250478 3.3 注意 シスコシステムズ - Cisco Security Monitoring, Analysis and Response System における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2009-2977 2011-09-21 15:48 2009-08-27 Show GitHub Exploit DB Packet Storm
250479 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスの IPv6 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4913 2011-09-20 14:09 2010-06-29 Show GitHub Exploit DB Packet Storm
250480 10 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4912 2011-09-20 14:05 2010-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313871 - linux linux_kernel The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activ… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2004-0427 2024-01-27 03:56 2004-07-7 Show GitHub Exploit DB Packet Storm
313872 - openbsd openbsd Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP P… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2004-0222 2024-01-27 03:55 2004-05-4 Show GitHub Exploit DB Packet Storm
313873 - freebsd freebsd Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count fo… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2002-0574 2024-01-27 03:55 2002-07-3 Show GitHub Exploit DB Packet Storm
313874 - proftpd
mandrakesoft
debian
conectiva
proftpd
mandrake_linux
debian_linux
linux
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2001-0136 2024-01-27 03:53 2001-03-12 Show GitHub Exploit DB Packet Storm
313875 5.8 MEDIUM
Network
chillcreations com_ccnewsletter Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in … CWE-22
Path Traversal
CVE-2010-0467 2024-01-27 02:44 2010-02-3 Show GitHub Exploit DB Packet Storm
313876 9.8 CRITICAL
Network
debian
canonical
lintian
debian_linux
ubuntu_linux
Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive i… CWE-22
Path Traversal
CVE-2009-4013 2024-01-27 02:44 2010-02-3 Show GitHub Exploit DB Packet Storm
313877 7.5 HIGH
Network
ibm websphere_application_server IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. CWE-178
 Improper Handling of Case Sensitivity
CVE-2000-0497 2024-01-27 02:43 2000-06-8 Show GitHub Exploit DB Packet Storm
313878 7.5 HIGH
Network
unify ewave_servletexec Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. CWE-178
 Improper Handling of Case Sensitivity
CVE-2000-0498 2024-01-27 02:43 2000-06-8 Show GitHub Exploit DB Packet Storm
313879 7.5 HIGH
Network
bea weblogic_server The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. CWE-178
 Improper Handling of Case Sensitivity
CVE-2000-0499 2024-01-27 02:43 2000-06-8 Show GitHub Exploit DB Packet Storm
313880 7.1 HIGH
Local
iss blackice_server_protection
blackice_pc_protection
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a … CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2004-1714 2024-01-27 02:21 2004-08-11 Show GitHub Exploit DB Packet Storm