Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252091	5	警告	Openswan レッドハット	-	Openswan におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3380	2011-11-21 16:04	2011-10-5	Show	GitHub Exploit DB Packet Storm

252092	4.3	警告	ClamAV	-	ClamAV のバイトコードエンジンにおけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-189 数値処理の問題	CVE-2011-3627	2011-11-21 16:03	2011-11-17	Show	GitHub Exploit DB Packet Storm

252093	4.3	警告	Robert Luberda	-	man2html の man2html.cgi.c におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2770	2011-11-21 16:01	2011-11-17	Show	GitHub Exploit DB Packet Storm

252094	7.5	危険	ＨＰの回し者	-	ＨＰの回し者製日記における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2011-4002	2011-11-21 12:02	2011-11-21	Show	GitHub Exploit DB Packet Storm

252095	5	警告	ＨＰの回し者	-	ＨＰの回し者製日記におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4001	2011-11-21 12:02	2011-11-21	Show	GitHub Exploit DB Packet Storm

252096	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性	CWE-119 バッファエラー	CVE-2011-2794	2011-11-21 12:00	2011-08-2	Show	GitHub Exploit DB Packet Storm

252097	4.3	警告	Google	-	Android におけるクロスアプリケーションスクリプティングの脆弱性	CWE-20 不適切な入力確認	CVE-2011-2357	2011-11-21 11:57	2011-08-12	Show	GitHub Exploit DB Packet Storm

252098	7.5	危険	アップル Google	-	Google Chrome おける同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2819	2011-11-21 11:57	2011-08-2	Show	GitHub Exploit DB Packet Storm

252099	7.5	危険	アップル Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2818	2011-11-21 11:56	2011-08-2	Show	GitHub Exploit DB Packet Storm

252100	7.5	危険	アップル Google	-	Google Chrome おける同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2805	2011-11-21 11:56	2011-08-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
317561	-		proftpd mandrakesoft debian conectiva	proftpd mandrake_linux debian_linux linux	Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2001-0136	2024-01-27 03:53	2001-03-12	Show	GitHub Exploit DB Packet Storm

317562	5.8	MEDIUM Network	chillcreations	com_ccnewsletter	Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in …	CWE-22 Path Traversal	CVE-2010-0467	2024-01-27 02:44	2010-02-3	Show	GitHub Exploit DB Packet Storm

317563	9.8	CRITICAL Network	debian canonical	lintian debian_linux ubuntu_linux	Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive i…	CWE-22 Path Traversal	CVE-2009-4013	2024-01-27 02:44	2010-02-3	Show	GitHub Exploit DB Packet Storm

317564	7.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.	CWE-178 Improper Handling of Case Sensitivity	CVE-2000-0497	2024-01-27 02:43	2000-06-8	Show	GitHub Exploit DB Packet Storm

317565	7.5	HIGH Network	unify	ewave_servletexec	Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.	CWE-178 Improper Handling of Case Sensitivity	CVE-2000-0498	2024-01-27 02:43	2000-06-8	Show	GitHub Exploit DB Packet Storm

317566	7.5	HIGH Network	bea	weblogic_server	The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.	CWE-178 Improper Handling of Case Sensitivity	CVE-2000-0499	2024-01-27 02:43	2000-06-8	Show	GitHub Exploit DB Packet Storm

317567	7.1	HIGH Local	iss	blackice_server_protection blackice_pc_protection	BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2004-1714	2024-01-27 02:21	2004-08-11	Show	GitHub Exploit DB Packet Storm

317568	7.0	HIGH Local	symantec	antivirus_scan_engine	The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUp…	CWE-59 Link Following	CVE-2004-0217	2024-01-27 02:21	2004-04-15	Show	GitHub Exploit DB Packet Storm

317569	5.5	MEDIUM Local	mgetty_project	mgetty	faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files.	CWE-59 Link Following	CVE-2003-0517	2024-01-27 02:20	2003-08-18	Show	GitHub Exploit DB Packet Storm

317570	7.8	HIGH Local	ibm	u2_universe	cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.	CWE-59 Link Following	CVE-2003-0578	2024-01-27 02:19	2003-08-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed