Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252101	7.5	危険	iScripts	-	iScripts EasyBiller の viewhistorydetail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5034	2011-12-9 13:43	2011-11-2	Show	GitHub Exploit DB Packet Storm

252102	4.3	警告	iScripts	-	iScripts eSwap の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5035	2011-12-9 13:42	2011-11-2	Show	GitHub Exploit DB Packet Storm

252103	7.5	危険	iScripts	-	iScripts eSwap の addsale.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5036	2011-12-9 13:42	2011-11-2	Show	GitHub Exploit DB Packet Storm

252104	7.5	危険	Michau Enterprises	-	SenseSites CommonSense CMS の article.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5037	2011-12-9 13:41	2011-11-2	Show	GitHub Exploit DB Packet Storm

252105	7.5	危険	Groone's World	-	Groone's Simple Contact Form における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-5038	2011-12-9 13:40	2011-11-2	Show	GitHub Exploit DB Packet Storm

252106	7.5	危険	ScriptsFeed.com	-	ScriptsFeed Recipes Listing Portal における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5039	2011-12-9 13:40	2011-11-2	Show	GitHub Exploit DB Packet Storm

252107	6.8	警告	John Bradshaw	-	Nucleus 用 NP_Gallery プラグインにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-5040	2011-12-9 13:39	2011-11-2	Show	GitHub Exploit DB Packet Storm

252108	7.5	危険	John Bradshaw	-	Nucleus 用 NP_Gallery プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5041	2011-12-9 13:38	2011-11-2	Show	GitHub Exploit DB Packet Storm

252109	4.3	警告	Blue Constant Media Ltd	-	Joomla! 用 DJ-ArtGallery コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5042	2011-12-9 13:38	2011-11-2	Show	GitHub Exploit DB Packet Storm

252110	6	警告	Blue Constant Media Ltd	-	Joomla! 用 DJ-ArtGallery コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5043	2011-12-9 13:34	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
317671	-		guillaumegardey	biborb	BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2005-0254	2024-02-3 01:44	2005-05-2	Show	GitHub Exploit DB Packet Storm

317672	-		guillaumegardey	biborb	Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter.	CWE-79 Cross-site Scripting	CVE-2005-0251	2024-02-3 01:42	2005-05-2	Show	GitHub Exploit DB Packet Storm

317673	7.0	HIGH Local	linux opensuse suse debian	linux_kernel opensuse linux_enterprise_server linux_enterprise_desktop linux_enterprise_high_availability_extension debian_linux	Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2010-1437	2024-02-3 01:38	2010-05-8	Show	GitHub Exploit DB Packet Storm

317674	-		postgresql trustix mandrakesoft redhat	postgresql secure_linux mandrake_linux_corporate_server enterprise_linux_desktop enterprise_linux mandrake_linux	The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2004-0977	2024-02-3 01:33	2005-02-9	Show	GitHub Exploit DB Packet Storm

317675	9.8	CRITICAL Network	mit openpkg debian	kerberos_5 openpkg debian_linux	Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.	CWE-415 Double Free	CVE-2004-0772	2024-02-3 00:27	2004-10-20	Show	GitHub Exploit DB Packet Storm

317676	-		mit debian redhat	kerberos_5 debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server	Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow…	CWE-415 Double Free	CVE-2004-0642	2024-02-3 00:27	2004-09-28	Show	GitHub Exploit DB Packet Storm

317677	9.8	CRITICAL Network	mit apple debian	kerberos_5 mac_os_x_server mac_os_x debian_linux	Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.	CWE-415 Double Free	CVE-2005-1689	2024-02-3 00:24	2005-07-18	Show	GitHub Exploit DB Packet Storm

317678	7.8	HIGH Local	microsoft	outlook internet_explorer windows_xp windows_server_2003 windows_98 windows_me windows_98se windows_nt	Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.	CWE-415 Double Free	CVE-2003-1048	2024-02-3 00:23	2004-07-27	Show	GitHub Exploit DB Packet Storm

317679	9.8	CRITICAL Network	openssl	openssl	Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 …	CWE-415 Double Free	CVE-2003-0545	2024-02-3 00:23	2003-11-17	Show	GitHub Exploit DB Packet Storm

317680	7.5	HIGH Network	gnome	gtk	Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.	CWE-415 Double Free	CVE-2005-0891	2024-02-3 00:22	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed