Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209841 4 警告 PostgreSQL.org
アップル
富士通
- PostgreSQL におけるロールに任意のユーザを追加または削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0060 2015-08-10 11:38 2014-02-20 Show GitHub Exploit DB Packet Storm
209842 6.4 警告 Ruby on Rails project - Ruby on Rails の actionpack/lib/action_dispatch/http/request.rb におけるデータベースクエリの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6417 2015-08-10 11:38 2013-12-3 Show GitHub Exploit DB Packet Storm
209843 4.3 警告 Ruby on Rails project - Ruby on Rails の implicit-render の実装におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-0130 2015-08-10 11:33 2014-05-6 Show GitHub Exploit DB Packet Storm
209844 4.3 警告 FFmpeg - FFmpeg の libavcodec/g2meet.c の kempf_decode_tile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-4264 2015-08-10 11:31 2013-08-7 Show GitHub Exploit DB Packet Storm
209845 6.8 警告 IBM
オラクル
- Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Maintenance に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5879 2015-08-10 11:13 2014-01-14 Show GitHub Exploit DB Packet Storm
209846 4 警告 オラクル - Oracle MySQL の MySQL Server における Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-3839 2015-08-10 11:09 2013-10-15 Show GitHub Exploit DB Packet Storm
209847 9.3 危険 レッドハット
日立
オラクル
- Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5889 2015-08-10 11:04 2014-01-14 Show GitHub Exploit DB Packet Storm
209848 5 警告 レッドハット
日立
オラクル
- Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5887 2015-08-10 11:03 2014-01-14 Show GitHub Exploit DB Packet Storm
209849 5 警告 レッドハット
日立
オラクル
- Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5899 2015-08-10 11:03 2014-01-14 Show GitHub Exploit DB Packet Storm
209850 4 警告 レッドハット
日立
オラクル
- Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5898 2015-08-10 11:02 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345881 - zonelabs zonealarm ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters. NVD-CWE-Other
CVE-2004-1936 2017-07-11 10:31 2004-04-14 Show GitHub Exploit DB Packet Storm
345882 - nuked-klan nuked-klan Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in (1) the user_langue parameter to index.php or (2… NVD-CWE-Other
CVE-2004-1937 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345883 - phorum phorum SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", a… NVD-CWE-Other
CVE-2004-1938 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345884 - rhinosoft zaep_antispam Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter. NVD-CWE-Other
CVE-2004-1939 2017-07-11 10:31 2004-04-14 Show GitHub Exploit DB Packet Storm
345885 - fastream netfile_ftp_web_server Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does not exist. NVD-CWE-Other
CVE-2004-1941 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345886 - sun patch_manager The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypca… NVD-CWE-Other
CVE-2004-1942 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345887 - phpbb_group phpbb PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2004-1943 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345888 - qualcomm eudora Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message. NVD-CWE-Other
CVE-2004-1944 2017-07-11 10:31 2004-04-14 Show GitHub Exploit DB Packet Storm
345889 - kinesphere_corporation exchange_pop3 Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field. NVD-CWE-Other
CVE-2004-1945 2017-07-11 10:31 2004-04-20 Show GitHub Exploit DB Packet Storm
345890 - cherokee cherokee_httpd Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C comm… NVD-CWE-Other
CVE-2004-1946 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm