Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
213331	3.5	注意	s9y	-	Serendipity の templates/2k11/admin/entries.tpl におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-2289	2015-03-25 11:30	2015-03-12	Show	GitHub Exploit DB Packet Storm

213332	5	警告	CODOFORUM	-	Codoforum の sanitize 関数における任意のファイルを読まれる脆弱性	CWE-22 パス・トラバーサル	CVE-2014-9261	2015-03-25 11:18	2014-11-23	Show	GitHub Exploit DB Packet Storm

213333	6.4	警告	ヒューレット・パッカードオラクル	-	Oracle E-Business Suite の Oracle Applications Framework における Diagnostics の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0397	2015-03-24 17:45	2013-01-15	Show	GitHub Exploit DB Packet Storm

213334	6.4	警告	ヒューレット・パッカードオラクル	-	Oracle E-Business Suite の Oracle CRM Technical Foundation における Application Framework の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0381	2015-03-24 17:44	2013-01-15	Show	GitHub Exploit DB Packet Storm

213335	4.3	警告	ヒューレット・パッカードオラクル	-	複数の Oracle Enterprise Manager 製品における Distributed/Cross DB Features の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0372	2015-03-24 17:44	2013-01-15	Show	GitHub Exploit DB Packet Storm

213336	4.3	警告	Apache Software Foundation	-	Apache ActiveMQ の Web デモにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6092	2015-03-24 15:35	2012-10-18	Show	GitHub Exploit DB Packet Storm

213337	10	危険	ヒューレット・パッカードオラクル	-	Oracle Database Mobile Server および Oracle Database Lite における脆弱性	CWE-noinfo 情報不足	CVE-2013-0366	2015-03-24 15:31	2013-01-15	Show	GitHub Exploit DB Packet Storm

213338	7.8	危険	ヒューレット・パッカードオラクル	-	Oracle Database Mobile Server および Oracle Database Lite における脆弱性	CWE-noinfo 情報不足	CVE-2013-0364	2015-03-24 15:30	2013-01-15	Show	GitHub Exploit DB Packet Storm

213339	7.8	危険	ヒューレット・パッカードオラクル	-	Oracle Database Mobile Server および Oracle Database Lite における脆弱性	CWE-noinfo 情報不足	CVE-2013-0363	2015-03-24 15:28	2013-01-15	Show	GitHub Exploit DB Packet Storm

213340	10	危険	ヒューレット・パッカードオラクル	-	Oracle Database Mobile Server および Oracle Database Lite における脆弱性	CWE-noinfo 情報不足	CVE-2013-0361	2015-03-24 15:27	2013-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
357801	-	freebsd	freebsd	Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.	NVD-CWE-Other	CVE-2000-0752	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357802	-	hp	openview_network_node_manager	Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.	NVD-CWE-Other	CVE-2000-0754	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357803	-	hp	openview_network_node_manager	Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.	NVD-CWE-Other	CVE-2000-0755	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357804	-	aptis_software	totalbill	The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed.	NVD-CWE-Other	CVE-2000-0757	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357805	-	lyris	list_manager	The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form field.	NVD-CWE-Other	CVE-2000-0758	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357806	-	ibm	os2_ftp_server	OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.	NVD-CWE-Other	CVE-2000-0761	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357807	-	bajie	java_http_server	The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.	NVD-CWE-Other	CVE-2000-0774	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357808	-	rapidstream	rapidstream	sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.	NVD-CWE-Other	CVE-2000-0784	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357809	-	bardon_data_systems	winu	WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges.	NVD-CWE-Other	CVE-2000-0789	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

357810	-	trustix	secure_linux	Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.	NVD-CWE-Other	CVE-2000-0791	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed