Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252361	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3335	2010-12-6 15:36	2010-11-9	Show	GitHub Exploit DB Packet Storm

252362	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3334	2010-12-6 15:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

252363	4.3	警告	Zope Foundation	-	Zope Object Database の ZEO/StorageServer.py におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-3495	2010-12-6 15:20	2010-10-19	Show	GitHub Exploit DB Packet Storm

252364	4.3	警告	マイクロソフト	-	複数の Microsoft 製品の toStaticHTML 関数および SafeHTML 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3324	2010-12-3 14:05	2010-10-12	Show	GitHub Exploit DB Packet Storm

252365	6.8	警告	アップル	-	Apple Mac OS X の xar におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3798	2010-12-3 13:13	2010-11-16	Show	GitHub Exploit DB Packet Storm

252366	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3797	2010-12-3 13:12	2010-11-16	Show	GitHub Exploit DB Packet Storm

252367	4.3	警告	アップル	-	Apple Mac OS X の Safari RSS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3796	2010-12-3 13:10	2010-11-16	Show	GitHub Exploit DB Packet Storm

252368	6	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスレッドハット	-	PostgreSQL の PL/perl および PL/Tcl 実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3433	2010-12-2 17:11	2010-10-4	Show	GitHub Exploit DB Packet Storm

252369	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の Mac_Read_POST_Resource 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2808	2010-12-2 17:08	2010-08-19	Show	GitHub Exploit DB Packet Storm

252370	5	警告	アップルサイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType の Standard Encoding Accented Character の呼び出しにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3054	2010-12-2 16:34	2010-08-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313911	-		episodex	episodex_guestbook	episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1685	2024-01-26 06:07	2005-05-20	Show	GitHub Exploit DB Packet Storm

313912	9.1	CRITICAL Network	midicart	midicart_php midicart_php_plus midicart_php_maxi	MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to adm…	CWE-425 Direct Request ('Forced Browsing')	CVE-2002-1798	2024-01-26 06:04	2002-12-31	Show	GitHub Exploit DB Packet Storm

313913	-		hostingcontroller	hosting_controller	Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1654	2024-01-26 06:03	2005-05-18	Show	GitHub Exploit DB Packet Storm

313914	-		yusasp	web_asset_manager	YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1668	2024-01-26 06:03	2005-05-18	Show	GitHub Exploit DB Packet Storm

313915	7.5	HIGH Network	iomega	nas_a300u_firmware	The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2002-1949	2024-01-26 06:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

313916	7.5	HIGH Network	procom	netforce_800_firmware	Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain t…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2005-3140	2024-01-26 05:58	2005-10-6	Show	GitHub Exploit DB Packet Storm

313917	-		solarwinds	dameware_mini_remote_control	DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2004-1852	2024-01-26 05:57	2004-03-23	Show	GitHub Exploit DB Packet Storm

313918	5.5	MEDIUM Local	macromedia	coldfusion	ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without usin…	CWE-470 Unsafe Reflection	CVE-2004-2331	2024-01-25 11:16	2004-12-31	Show	GitHub Exploit DB Packet Storm

313919	9.8	CRITICAL Network	mozilla sco	mozilla openserver	The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, whic…	CWE-502 Deserialization of Untrusted Data	CVE-2003-0791	2024-01-25 11:14	2003-10-7	Show	GitHub Exploit DB Packet Storm

313920	-		-	-	Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-5533. Reason: This record is a reservation duplicate of CVE-2023-5533. Notes: All CVE users should reference CVE-2023-55…	-	CVE-2023-5656	2024-01-24 08:15	2023-10-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed