Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215361 3.5 注意 KASSELER CMS - Kasseler CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3728 2014-03-14 16:17 2013-06-28 Show GitHub Exploit DB Packet Storm
215362 7.5 危険 KASSELER CMS - Kasseler CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3727 2014-03-14 16:15 2013-06-28 Show GitHub Exploit DB Packet Storm
215363 7.5 危険 ZLDNN.COM - DotNetNuke 用 ZLDNN DNNArticle モジュールの RSS ページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5117 2014-03-14 15:06 2013-09-12 Show GitHub Exploit DB Packet Storm
215364 4.3 警告 DNN - DotNetNuke におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7335 2014-03-14 15:05 2013-08-13 Show GitHub Exploit DB Packet Storm
215365 4.3 警告 DNN - DotNetNuke におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4649 2014-03-14 15:05 2013-08-13 Show GitHub Exploit DB Packet Storm
215366 3.5 注意 DNN - DotNetNuke におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3943 2014-03-14 14:39 2013-08-13 Show GitHub Exploit DB Packet Storm
215367 7.5 危険 FreeType Project - FreeType の cff/cf2hints.c 内の cf2_hintmap_build 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-2240 2014-03-14 14:19 2014-03-7 Show GitHub Exploit DB Packet Storm
215368 4.3 警告 CiviCRM
Caseproof
Joobi		 - 複数ベンダの製品で使用される Open Flash Chart の open-flash-chart.swf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1636 2014-03-14 13:48 2013-06-10 Show GitHub Exploit DB Packet Storm
215369 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0502 2014-03-13 18:24 2014-02-20 Show GitHub Exploit DB Packet Storm
215370 7.8 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0499 2014-03-13 18:23 2014-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290131 - greg_roelofs libpng Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar… NVD-CWE-Other
CVE-2002-1363 2017-10-10 10:30 2002-12-26 Show GitHub Exploit DB Packet Storm
290132 - ehud_gavron tracesroute Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses. NVD-CWE-Other
CVE-2002-1364 2017-10-10 10:30 2002-12-23 Show GitHub Exploit DB Packet Storm
290133 - easy_software_products
apple 		cups
mac_os_x 		Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream. NVD-CWE-Other
CVE-2002-1366 2017-10-10 10:30 2002-12-26 Show GitHub Exploit DB Packet Storm
290134 - easy_software_products
apple 		cups
mac_os_x 		Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activi… NVD-CWE-Other
CVE-2002-1367 2017-10-10 10:30 2002-12-26 Show GitHub Exploit DB Packet Storm
290135 - easy_software_products
apple 		cups
mac_os_x 		jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitra… NVD-CWE-Other
CVE-2002-1369 2017-10-10 10:30 2002-12-26 Show GitHub Exploit DB Packet Storm
290136 - easy_software_products
apple 		cups
mac_os_x 		filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modifie… NVD-CWE-Other
CVE-2002-1371 2017-10-10 10:30 2002-12-26 Show GitHub Exploit DB Packet Storm
290137 - vim_development_group vim vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to ed… NVD-CWE-Other
CVE-2002-1377 2017-10-10 10:30 2002-12-23 Show GitHub Exploit DB Packet Storm
290138 - university_of_cambridge exim Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value. NVD-CWE-Other
CVE-2002-1381 2017-10-10 10:30 2002-12-23 Show GitHub Exploit DB Packet Storm
290139 - macromedia flash_player Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-200… NVD-CWE-Other
CVE-2002-1382 2017-10-10 10:30 2002-12-23 Show GitHub Exploit DB Packet Storm
290140 - open_webmail open_webmail openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name provided in the sessionid parameter for op… NVD-CWE-Other
CVE-2002-1385 2017-10-10 10:30 2002-12-26 Show GitHub Exploit DB Packet Storm