Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214861 4.3 警告 Roundup - Roundup におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6132 2014-04-14 18:31 2012-05-15 Show GitHub Exploit DB Packet Storm
214862 6.8 警告 Lester Chan - WordPress 用 WP-PostViews プラグインのオプションの管理者ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3252 2014-04-14 18:26 2013-05-7 Show GitHub Exploit DB Packet Storm
214863 6.8 警告 Qian Qin - WordPress 用 qTranslate プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3251 2014-04-14 18:26 2013-06-4 Show GitHub Exploit DB Packet Storm
214864 6.8 警告 Jeremy Massel - WordPress 用 underConstruction プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2699 2014-04-14 18:26 2013-06-3 Show GitHub Exploit DB Packet Storm
214865 6.8 警告 Lester Chan - WordPress 用 WP-Print プラグインのオプションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2693 2014-04-14 18:25 2013-04-5 Show GitHub Exploit DB Packet Storm
214866 6.8 警告 Dean Adjie Minwarie - WordPress 用 DVS Custom Notification プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4921 2014-04-14 18:24 2012-09-14 Show GitHub Exploit DB Packet Storm
214867 5.8 警告 kernel.org - Linux-PAM 用 pam_timestamp モジュールの pam_timestamp.c におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2583 2014-04-14 18:04 2014-03-26 Show GitHub Exploit DB Packet Storm
214868 7.5 危険 Pearson Education, Inc. - Pearson eSIS Enterprise Student Information System のパスワードリセット機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1455 2014-04-14 17:52 2014-04-6 Show GitHub Exploit DB Packet Storm
214869 2.1 注意 CloudBees - CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2033 2014-04-14 17:38 2013-05-2 Show GitHub Exploit DB Packet Storm
214870 6.5 警告 レッドハット (KIE Group)
レッドハット		 - 複数の Red Hat Jboss 製品における任意の Java コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-6468 2014-04-14 17:23 2013-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289711 - kame racoon The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish… NVD-CWE-Other
CVE-2004-0155 2017-10-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
289712 - kame racoon KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp… NVD-CWE-Other
CVE-2004-0164 2017-10-11 10:29 2004-03-3 Show GitHub Exploit DB Packet Storm
289713 - openbsd openssh Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992. CWE-22
Path Traversal 		CVE-2004-0175 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
289714 - linux linux_kernel The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by r… NVD-CWE-Other
CVE-2004-0181 2017-10-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
289715 - sgi
utempter
slackware 		propack
utempter
slackware_linux 		Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an… NVD-CWE-Other
CVE-2004-0233 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
289716 - clearswift
f-secure
rarlab
redhat
sgi
stalker
tsugio_okamoto
winzip 		mailsweeper
f-secure_anti-virus
f-secure_for_firewalls
f-secure_internet_security
f-secure_personal_express
internet_gatekeeper
winrar
lha
propack
cgpmcafee
winzip
fe… 		Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2004-0234 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
289717 - clearswift
f-secure
rarlab
redhat
sgi
stalker
tsugio_okamoto
winzip 		mailsweeper
f-secure_anti-virus
f-secure_for_firewalls
f-secure_internet_security
f-secure_personal_express
internet_gatekeeper
winrar
lha
propack
cgpmcafee
winzip
fe… 		Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute … NVD-CWE-Other
CVE-2004-0235 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
289718 - cisco ios Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2… CWE-20
 Improper Input Validation  		CVE-2004-0244 2017-10-11 10:29 2004-11-23 Show GitHub Exploit DB Packet Storm
289719 - open_group
xi_graphics
ibm 		cde_common_desktop_environment
dextop
aix 		Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2004-0368 2017-10-11 10:29 2004-05-4 Show GitHub Exploit DB Packet Storm
289720 - cvs cvs Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines. NVD-CWE-Other
CVE-2004-0396 2017-10-11 10:29 2004-06-14 Show GitHub Exploit DB Packet Storm