Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
214861	4.3	警告	Roundup	-	Roundup におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6132	2014-04-14 18:31	2012-05-15	Show	GitHub Exploit DB Packet Storm

214862	6.8	警告	Lester Chan	-	WordPress 用 WP-PostViews プラグインのオプションの管理者ページにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3252	2014-04-14 18:26	2013-05-7	Show	GitHub Exploit DB Packet Storm

214863	6.8	警告	Qian Qin	-	WordPress 用 qTranslate プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3251	2014-04-14 18:26	2013-06-4	Show	GitHub Exploit DB Packet Storm

214864	6.8	警告	Jeremy Massel	-	WordPress 用 underConstruction プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2699	2014-04-14 18:26	2013-06-3	Show	GitHub Exploit DB Packet Storm

214865	6.8	警告	Lester Chan	-	WordPress 用 WP-Print プラグインのオプションにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2693	2014-04-14 18:25	2013-04-5	Show	GitHub Exploit DB Packet Storm

214866	6.8	警告	Dean Adjie Minwarie	-	WordPress 用 DVS Custom Notification プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4921	2014-04-14 18:24	2012-09-14	Show	GitHub Exploit DB Packet Storm

214867	5.8	警告	kernel.org	-	Linux-PAM 用 pam_timestamp モジュールの pam_timestamp.c におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-2583	2014-04-14 18:04	2014-03-26	Show	GitHub Exploit DB Packet Storm

214868	7.5	危険	Pearson Education, Inc.	-	Pearson eSIS Enterprise Student Information System のパスワードリセット機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-1455	2014-04-14 17:52	2014-04-6	Show	GitHub Exploit DB Packet Storm

214869	2.1	注意	CloudBees	-	CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2033	2014-04-14 17:38	2013-05-2	Show	GitHub Exploit DB Packet Storm

214870	6.5	警告	レッドハット (KIE Group) レッドハット	-	複数の Red Hat Jboss 製品における任意の Java コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-6468	2014-04-14 17:23	2013-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289661	-	mozilla	firefox	Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote att…	NVD-CWE-Other	CVE-2005-0230	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289662	-	mozilla	firefox	Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."	NVD-CWE-Other	CVE-2005-0231	2017-10-11 10:29	2005-02-7	Show	GitHub Exploit DB Packet Storm

289663	-	mozilla	firefox	Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site…	NVD-CWE-Other	CVE-2005-0232	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289664	-	squid	squid	The httpProcessReplyHeader function in http.c for Squid 2.5-STABLE7 and earlier does not properly set the debug context when it is handling "oversized" HTTP reply headers, which might allow remote at…	NVD-CWE-Other	CVE-2005-0241	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289665	-	postgresql	postgresql	PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2005-0244	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289666	-	postgresql	postgresql	Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via (1) a large number of variables in a SQL statement being handled by the read_sql…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-0247	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289667	-	mozilla	firefox mozilla thunderbird	String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions tha…	NVD-CWE-Other	CVE-2005-0255	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289668	-	washington_university	wu-ftpd	The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wild…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-0256	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289669	-	wietse_venema redhat suse	postfix enterprise_linux enterprise_linux_desktop suse_linux	Postfix 2.1.3, when /proc/net/if_inet6 is not available and permit_mx_backup is enabled in smtpd_recipient_restrictions, allows remote attackers to bypass e-mail restrictions and perform mail relayin…	NVD-CWE-Other	CVE-2005-0337	2017-10-11 10:29	2005-05-2	Show	GitHub Exploit DB Packet Storm

289670	-	hp	hp-ux	Unknown vulnerability in BIND 9.2.0 in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to cause a denial of service.	NVD-CWE-Other	CVE-2005-0364	2017-10-11 10:29	2005-02-10	Show	GitHub Exploit DB Packet Storm