Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219211 4.3 警告 IBM - IBM WebSphere Commerce の WebSphere Commerce Tool におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0566 2013-08-28 12:06 2013-08-23 Show GitHub Exploit DB Packet Storm
219212 9.3 危険 リアルネットワークス - RealPlayer のファイル名の処理にスタックバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-4973 2013-08-28 11:47 2013-08-27 Show GitHub Exploit DB Packet Storm
219213 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-4974 2013-08-28 10:52 2013-08-23 Show GitHub Exploit DB Packet Storm
219214 7.5 危険 インテル - Intel Wireless WiMAX Connection 2400 用 Intel WiMAX Network Service における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-4219 2013-08-27 19:25 2013-08-8 Show GitHub Exploit DB Packet Storm
219215 2.1 注意 インテル - Intel Wireless WiMAX Connection 2400 用 Intel WiMAX Network Service における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-4218 2013-08-27 19:24 2013-08-8 Show GitHub Exploit DB Packet Storm
219216 2.1 注意 インテル - Intel Wireless WiMAX Connection 2400 用 Intel WiMAX Network Service における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-4217 2013-08-27 19:23 2013-08-8 Show GitHub Exploit DB Packet Storm
219217 2.1 注意 インテル - Intel Wireless WiMAX Connection 2400 用 Intel WiMAX Network Service におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4216 2013-08-27 19:22 2013-08-8 Show GitHub Exploit DB Packet Storm
219218 5.8 警告 Amazon.com, Inc.
Apache Software Foundation
- Amazon FPS merchant Java SDK で使用される Apache Commons HttpClient における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5783 2013-08-27 18:48 2012-11-4 Show GitHub Exploit DB Packet Storm
219219 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsWindow::OnExposeEvent 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5829 2013-08-27 18:20 2012-11-20 Show GitHub Exploit DB Packet Storm
219220 5 警告 Paolo Bacchilega - File Roller におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4668 2013-08-27 18:17 2013-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 17, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307401 - kerio kerio_mailserver Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to decoding of uuencoded input, which triggers … NVD-CWE-noinfo
CWE-399
 Resource Management Errors
CVE-2008-0859 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
307402 - kerio avg_plugin
kerio_mailserver
Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors related to null DACLs. NVD-CWE-noinfo
CVE-2008-0860 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
307403 - ibm lotus_quickplace Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject arbitrary web script or HTML via an h_SearchString sub-parameter in the PreSetFi… CWE-79
Cross-site Scripting
CVE-2008-0861 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
307404 - ibm lotus_notes IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-assisted remote attackers to bypass Execution Control List (EC… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-0862 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
307405 - bea weblogic_server BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to obtain sensitive information and potentially launch further… CWE-200
Information Exposure
CVE-2008-0863 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
307406 - bea weblogic_workshop Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML via an invalid action URI, which is not properly handled by … CWE-79
Cross-site Scripting
CVE-2008-0866 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
307407 - bea
bea_systems
weblogic_server
weblogic_workshop
weblogic
Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "fram… CWE-79
Cross-site Scripting
CVE-2008-0869 2011-03-8 12:05 2008-02-21 Show GitHub Exploit DB Packet Storm
307408 - hitachi eur_print_manager Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service (service ha… NVD-CWE-noinfo
CVE-2008-0875 2011-03-8 12:05 2008-02-22 Show GitHub Exploit DB Packet Storm
307409 - hitachi sewb3_mi-platform
sewb3_platform
Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through 02-14-/A allows remote attackers to cause a denial of service (service outage) v… CWE-20
 Improper Input Validation 
CVE-2008-0876 2011-03-8 12:05 2008-02-22 Show GitHub Exploit DB Packet Storm
307410 - bea weblogic_server BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for application servlets via crafted request headers. CWE-287
Improper Authentication
CVE-2008-0895 2011-03-8 12:05 2008-02-23 Show GitHub Exploit DB Packet Storm