Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215821 7.1 危険 David King
Canonical		 - GNOME Vino の vino-server.c の vino_server_client_data_pending 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5745 2014-03-5 17:26 2013-09-12 Show GitHub Exploit DB Packet Storm
215822 3.6 注意 Samba Project - Samba の nsswitch/pam_winbind.c の winbind_name_list_to_sid_string_list 関数におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6150 2014-03-5 17:22 2012-06-12 Show GitHub Exploit DB Packet Storm
215823 6.8 警告 Gentoo Linux - Xdg-utils における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0386 2014-03-5 17:22 2008-01-30 Show GitHub Exploit DB Packet Storm
215824 6.8 警告 Google - Android OS において任意の Java のメソッドが実行される脆弱性 CWE-DesignError
CVE-2013-4710 2014-03-5 17:21 2013-12-17 Show GitHub Exploit DB Packet Storm
215825 6 警告 シスコシステムズ - Cisco Unified Communications Manager における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0686 2014-03-5 17:20 2014-02-3 Show GitHub Exploit DB Packet Storm
215826 4.3 警告 AITpro - WordPress 用 BulletProof Security プラグインのセキュリティログにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3487 2014-03-5 17:14 2013-08-1 Show GitHub Exploit DB Packet Storm
215827 4.3 警告 Andy Bailey - WordPress 用 CommentLuv プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1409 2014-03-5 17:13 2013-02-6 Show GitHub Exploit DB Packet Storm
215828 4.3 警告 アイファイ - Eye-Fi Helper におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4696 2014-03-5 16:56 2011-11-17 Show GitHub Exploit DB Packet Storm
215829 4.3 警告 DrinkedIn - Android 用 DrinkedIn BarFinder アプリケーションにおける任意の JavaScript コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1887 2014-03-5 16:42 2014-02-7 Show GitHub Exploit DB Packet Storm
215830 6.4 警告 HS Group - Android 用 ForzeArmate アプリケーションにおける任意の JavaScript コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1885 2014-03-5 16:40 2014-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288801 - kde
suse 		kde
suse_linux 		kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp. NVD-CWE-Other
CVE-2001-0610 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
288802 - carello e-commerce Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. NVD-CWE-Other
CVE-2001-0614 2017-12-19 11:29 2001-08-22 Show GitHub Exploit DB Packet Storm
288803 - alliedtelesyn at-ar220e Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single… NVD-CWE-Other
CVE-2001-0617 2017-12-19 11:29 2001-08-22 Show GitHub Exploit DB Packet Storm
288804 - lucent orinoco_rg-1000 Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear dur… NVD-CWE-Other
CVE-2001-0618 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
288805 - iplanet calendar_server iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator use… NVD-CWE-Other
CVE-2001-0620 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
288806 - sendfile sendfile sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain… NVD-CWE-Other
CVE-2001-0623 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
288807 - qnx qnx QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos. NVD-CWE-Other
CVE-2001-0624 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
288808 - incredimail incredimail Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in t… NVD-CWE-Other
CVE-2001-0642 2017-12-19 11:29 2001-09-20 Show GitHub Exploit DB Packet Storm
288809 - axent netprowler Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the "admin" password, or (2) connect to a MySQL ODBC fr… NVD-CWE-Other
CVE-2001-0645 2017-12-19 11:29 2001-09-20 Show GitHub Exploit DB Packet Storm
288810 - apple personal_web_sharing Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request. NVD-CWE-Other
CVE-2001-0649 2017-12-19 11:29 2001-09-20 Show GitHub Exploit DB Packet Storm