Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211951	6.8	警告	LANDesk	-	Landesk Management Suite におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-5361	2015-04-23 11:14	2014-09-15	Show	GitHub Exploit DB Packet Storm

211952	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2015-3043	2015-04-22 17:49	2015-04-14	Show	GitHub Exploit DB Packet Storm

211953	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2015-3042	2015-04-22 17:49	2015-04-14	Show	GitHub Exploit DB Packet Storm

211954	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2015-3041	2015-04-22 17:49	2015-04-14	Show	GitHub Exploit DB Packet Storm

211955	5	警告	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における ASLR 保護メカニズムを回避される脆弱性	CWE-200 情報漏えい	CVE-2015-3040	2015-04-22 17:49	2015-04-14	Show	GitHub Exploit DB Packet Storm

211956	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2015-3039	2015-04-22 17:49	2015-04-14	Show	GitHub Exploit DB Packet Storm

211957	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2015-3038	2015-04-22 17:49	2015-04-14	Show	GitHub Exploit DB Packet Storm

211958	7.5	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	複数の Oracle Java 製品における JAXP に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5802	2015-04-22 17:33	2013-10-15	Show	GitHub Exploit DB Packet Storm

211959	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	複数の Oracle Java 製品における JAXP に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5825	2015-04-22 17:32	2013-10-15	Show	GitHub Exploit DB Packet Storm

211960	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通 NetBSD ヒューレット・パッカードターボリナックスレッドハット FreeBSD オラクル Google 日立 OpenBSD	-	Apache Portable Runtime ライブラリなどの製品で使用される apr_fnmatch.c および fnmatch.c におけるサービス運用妨害 (CPU とメモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0419	2015-04-22 16:23	2011-03-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346011	-	enterasys	xsr-1805 xsr-1850 xsr-3000	Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service (crash) via a packet with the IP record r…	NVD-CWE-Other	CVE-2004-0674	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346012	-	mcmurtrey_whitaker_and_associates	cart32	Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBui…	NVD-CWE-Other	CVE-2004-0675	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346013	-	fastream	netfile_ftp_web_server	Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang) via the cd command with an unusual argument, possibly due to multiple leading …	NVD-CWE-Other	CVE-2004-0677	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346014	-	12planet	chat_server	Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter.	CWE-79 Cross-site Scripting	CVE-2004-0678	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346015	-	unreal	unrealircd	The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gai…	NVD-CWE-Other	CVE-2004-0679	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346016	-	zoom	model_5560_x3_ethernet_adsl_modem	Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow …	NVD-CWE-Other	CVE-2004-0680	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346017	-	comersus_open_technologies	comersus_cart	Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Co…	NVD-CWE-Other	CVE-2004-0681	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346018	-	comersus_open_technologies	comersus_cart	This vulnerability is addressed in the following product update: Comersus Open Technologies, Comersus Cart, 5.098	NVD-CWE-Other	CVE-2004-0681	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346019	-	comersus_open_technologies	comersus_cart	comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.	NVD-CWE-Other	CVE-2004-0682	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

346020	-	symantec	norton_antivirus	Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories.	NVD-CWE-Other	CVE-2004-0683	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed