Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209621	7.6	危険	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE の Java Runtime Environment における ImageIO の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2429	2015-03-18 16:04	2013-04-16	Show	GitHub Exploit DB Packet Storm

209622	10	危険	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE の Java Runtime Environment における Beans の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-1558	2015-03-18 16:04	2013-04-16	Show	GitHub Exploit DB Packet Storm

209623	10	危険	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE および JavaFX の Java Runtime Environment における 2D の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2432	2015-03-18 16:04	2013-04-16	Show	GitHub Exploit DB Packet Storm

209624	7.6	危険	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE および JavaFX の Java Runtime Environment における Install の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-1563	2015-03-18 16:04	2013-04-16	Show	GitHub Exploit DB Packet Storm

209625	7.6	危険	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE および JavaFX の Java Runtime Environment における 2D の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2394	2015-03-18 16:04	2013-04-16	Show	GitHub Exploit DB Packet Storm

209626	7.6	危険	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE および JavaFX の Java Runtime Environment における ImageIO の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2430	2015-03-18 16:04	2013-04-16	Show	GitHub Exploit DB Packet Storm

209627	5	警告	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE の Java Runtime Environment における Serviceability に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2412	2015-03-18 16:02	2013-06-18	Show	GitHub Exploit DB Packet Storm

209628	3.6	注意	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE の Java Runtime Environment における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-1500	2015-03-18 15:47	2013-06-18	Show	GitHub Exploit DB Packet Storm

209629	4.3	警告	アップル日立富士通サン・マイクロシステムズオラクル	-	Oracle Javadoc ツールに脆弱性	CWE-noinfo 情報不足	CVE-2013-1571	2015-03-18 15:46	2013-06-18	Show	GitHub Exploit DB Packet Storm

209630	6.4	警告	アップル日立サン・マイクロシステムズオラクル	-	Oracle Java SE の Java Runtime Environment における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-2407	2015-03-18 15:46	2013-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350001	-	millenux_gmbh university_of_washington redhat	anonftp wu-ftpd linux	wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.	NVD-CWE-Other	CVE-1999-0997	2008-09-6 05:18	1999-12-20	Show	GitHub Exploit DB Packet Storm

350002	-	lotus	domino	SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.	NVD-CWE-Other	CVE-1999-1012	2008-09-6 05:18	1999-05-4	Show	GitHub Exploit DB Packet Storm

350003	-	cisco	resource_manager	Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community st…	NVD-CWE-Other	CVE-1999-1042	2008-09-6 05:18	1999-12-31	Show	GitHub Exploit DB Packet Storm

350004	-	matt_wright	formhandler.cgi	Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to…	NVD-CWE-Other	CVE-1999-1051	2008-09-6 05:18	1999-11-16	Show	GitHub Exploit DB Packet Storm

350005	-	apache matt_wright	http_server matt_wright_guestbook	guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1…	NVD-CWE-Other	CVE-1999-1053	2008-09-6 05:18	1999-09-13	Show	GitHub Exploit DB Packet Storm

350006	-	digital	vms	VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.	NVD-CWE-Other	CVE-1999-1057	2008-09-6 05:18	1990-10-25	Show	GitHub Exploit DB Packet Storm

350007	-	att	svr4	Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-1999-1059	2008-09-6 05:18	1992-02-25	Show	GitHub Exploit DB Packet Storm

350008	-	xylogics	annex	Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.	NVD-CWE-Other	CVE-1999-1070	2008-09-6 05:18	1998-07-25	Show	GitHub Exploit DB Packet Storm

350009	-	ipswitch	ws_ftp_pro	WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.	NVD-CWE-Other	CVE-1999-1078	2008-09-6 05:18	1999-07-29	Show	GitHub Exploit DB Packet Storm

350010	-	bsd	bsd	Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.	NVD-CWE-Other	CVE-1999-1098	2008-09-6 05:18	1995-03-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed