Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251041	7.8	危険	アップルサイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社レッドハット	-	libpng における圧縮された補助チャンクの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-0205	2012-03-27 10:22	2010-03-4	Show	GitHub Exploit DB Packet Storm

251042	7.5	危険	クアンタムデル IBM	-	複数のテープライブラリ製品におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-1844	2012-03-26 18:12	2012-03-22	Show	GitHub Exploit DB Packet Storm

251043	5	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1841	2012-03-26 18:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251044	5	警告	LG-Nortel	-	LG-Nortel ELO GS24M に複数の脆弱性	CWE-287 不適切な認証	CVE-2012-1838	2012-03-26 16:29	2012-03-22	Show	GitHub Exploit DB Packet Storm

251045	7.5	危険	Webglimpse	-	WebGlimpse に OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1795	2012-03-26 16:24	2012-03-20	Show	GitHub Exploit DB Packet Storm

251046	7.5	危険	Pydio	-	AjaXplorer におけるログインのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-1840	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251047	7.5	危険	Pydio	-	AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1839	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251048	5	警告	IBM	-	IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1837	2012-03-26 16:07	2012-03-22	Show	GitHub Exploit DB Packet Storm

251049	4.3	警告	IBM	-	IBM Tivoli Endpoint Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0719	2012-03-26 16:04	2012-03-22	Show	GitHub Exploit DB Packet Storm

251050	4.3	警告	ESET K7 Computing AVG Technologies トレンドマイクロ Ikarus Norman ソフォスマカフィー Beijing Rising International Software BitDefender VirusBlokAda フォーティネットカスペルスキー Emsisoft Authentium シマンテックエフ・セキュア Jiangmin	-	複数の製品の Gzip ファイルパーサにおけるマルウェア検知を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1461	2012-03-26 14:35	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318001	7.5	HIGH Network	cisco	ip_phone_7940_firmware ip_phone_7960_firmware	Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages suc…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2005-2181	2024-02-9 05:45	2005-07-11	Show	GitHub Exploit DB Packet Storm

318002	7.5	HIGH Network	grandstream	bt-100_firmware	Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spo…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2005-2182	2024-02-9 05:45	2005-07-11	Show	GitHub Exploit DB Packet Storm

318003	9.8	CRITICAL Network	sgi	irix	The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a pass…	CWE-346 Origin Validation Error	CVE-2003-0174	2024-02-9 05:45	2003-05-12	Show	GitHub Exploit DB Packet Storm

318004	6.5	MEDIUM Network	ubbcentral	ubb.threads	Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow …	CWE-352 Origin Validation Error	CVE-2005-2059	2024-02-9 05:44	2005-06-29	Show	GitHub Exploit DB Packet Storm

318005	4.3	MEDIUM Network	invisioncommunity	gallery	Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) del…	CWE-352 Origin Validation Error	CVE-2005-1947	2024-02-9 05:44	2005-06-9	Show	GitHub Exploit DB Packet Storm

318006	9.8	CRITICAL Network	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without ha…	CWE-459 Incomplete Cleanup	CVE-2005-1744	2024-02-9 05:35	2005-05-24	Show	GitHub Exploit DB Packet Storm

318007	7.5	HIGH Network	accessdata	secureclean	SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be …	CWE-459 Incomplete Cleanup	CVE-2002-2070	2024-02-9 05:35	2002-12-31	Show	GitHub Exploit DB Packet Storm

318008	7.5	HIGH Network	microsoft	windows_nt	Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing …	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-1999-1127	2024-02-9 05:35	1999-12-31	Show	GitHub Exploit DB Packet Storm

318009	7.5	HIGH Network	tolvanen	eraser	Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.	CWE-459 Incomplete Cleanup	CVE-2002-2068	2024-02-9 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

318010	7.5	HIGH Network	pgp	personal_privacy	PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted.	CWE-459 Incomplete Cleanup	CVE-2002-2069	2024-02-9 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed