Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252531	4.3	警告	SAP	-	SAP Netweaver の Virus Scan Interface におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4707	2011-12-13 14:50	2011-12-8	Show	GitHub Exploit DB Packet Storm

252532	5	警告	Igor Sysoev	-	nginx におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4315	2011-12-13 14:49	2011-11-15	Show	GitHub Exploit DB Packet Storm

252533	7.5	危険	Mambo Foundation	-	Mambo CMS の administrator/index2.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-2917	2011-12-13 14:41	2011-12-8	Show	GitHub Exploit DB Packet Storm

252534	6.8	警告	MIT Kerberos	-	MIT Kerberos の process_tgs_req 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1530	2011-12-13 14:40	2011-12-6	Show	GitHub Exploit DB Packet Storm

252535	6.4	警告	BlackBerry	-	BlackBerry Administration API におけるテキストファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2011-0287	2011-12-13 14:35	2011-07-12	Show	GitHub Exploit DB Packet Storm

252536	6.4	警告	Widelands	-	Widelands におけるパストラバーサル攻撃を誘発される脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4675	2011-12-12 18:21	2011-12-5	Show	GitHub Exploit DB Packet Storm

252537	5	警告	One Click Orgs	-	One Click Orgs のパスワードリセット機能におけるユーザアカウントを列挙される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4678	2011-12-12 18:19	2011-12-6	Show	GitHub Exploit DB Packet Storm

252538	4	警告	One Click Orgs	-	One Click Orgs におけるサービス運用妨害 (ログイン障害) の脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4555	2011-12-12 18:18	2011-12-6	Show	GitHub Exploit DB Packet Storm

252539	5.5	警告	One Click Orgs	-	One Click Orgs における巧妙に細工された SMTP トラフィックを誘発する脆弱性	CWE-20 不適切な入力確認	CVE-2011-4554	2011-12-12 18:15	2011-12-6	Show	GitHub Exploit DB Packet Storm

252540	6.9	警告	Celery	-	Celery における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4356	2011-12-12 18:14	2011-12-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
318151	-		tcpdump	tcpdump	Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length t…	CWE-125 CWE-191 Out-of-bounds Read Integer Underflow (Wrap or Wraparound)	CVE-2004-0184	2024-02-16 06:09	2004-05-4	Show	GitHub Exploit DB Packet Storm

318152	-		openbsd	openbsd	isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-…	CWE-125 Out-of-bounds Read	CVE-2004-0221	2024-02-16 06:09	2004-05-4	Show	GitHub Exploit DB Packet Storm

318153	8.8	HIGH Network	phpbb	phpbb	prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) …	CWE-665 Improper Initialization	CVE-2001-1471	2024-02-16 06:06	2001-07-31	Show	GitHub Exploit DB Packet Storm

318154	7.5	HIGH Network	isc canonical apple	bind ubuntu_linux mac_os_x_server mac_os_x	BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.	CWE-617 Reachable Assertion	CVE-2006-4095	2024-02-16 06:04	2006-09-6	Show	GitHub Exploit DB Packet Storm

318155	-		wirlab	kphone	sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read.	CWE-125 Out-of-bounds Read	CVE-2004-1940	2024-02-16 05:54	2004-12-31	Show	GitHub Exploit DB Packet Storm

318156	-		cisco symantec hp avaya redhat freebsd openbsd apple sco 4d checkpoint dell forcepoint litespeedtech neoteris novell openssl sgi stonesoft tarantella vmware bluecoat securecomputing sun	firewall_services_module clientless_vpn_gateway_4400 apache-based_web_server aaa_server sg203 hp-ux enterprise_linux_desktop ciscoworks_common_management_foundation freebsd	The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote at…	CWE-125 Out-of-bounds Read	CVE-2004-0112	2024-02-16 05:54	2004-11-23	Show	GitHub Exploit DB Packet Storm

318157	-		tcpdump	tcpdump	TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read,…	CWE-125 Out-of-bounds Read	CVE-2004-0183	2024-02-16 05:53	2004-05-4	Show	GitHub Exploit DB Packet Storm

318158	7.5	HIGH Network	linux redhat	linux_kernel enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop enterprise_linux_eus virtualization	A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that f…	CWE-667 Improper Locking	CVE-2009-4272	2024-02-16 05:47	2010-01-28	Show	GitHub Exploit DB Packet Storm

318159	7.5	HIGH Network	apache	http_server	Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "…	CWE-667 Improper Locking	CVE-2004-0174	2024-02-16 05:37	2004-05-4	Show	GitHub Exploit DB Packet Storm

318160	5.5	MEDIUM Local	microsoft	windows_xp windows_2000 windows_2003_server	The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the…	CWE-667 Improper Locking	CVE-2006-2374	2024-02-16 05:22	2006-06-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed