Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219811 2.1 注意 RSAセキュリティ - アプライアンスで使用される EMC RSA Authentication Manager における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-3273 2013-07-10 13:44 2013-07-8 Show GitHub Exploit DB Packet Storm
219812 7.5 危険 Atlassian - Atlassian Crowd における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2013-3926 2013-07-10 11:33 2013-06-30 Show GitHub Exploit DB Packet Storm
219813 7.8 危険 シスコシステムズ - Cisco Unified Customer Voice Portal の Resource Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-1224 2013-07-10 10:45 2013-05-8 Show GitHub Exploit DB Packet Storm
219814 4.3 警告 WordPress.org
Fedora Project
Moxiecode Systems
- WordPress などの製品で使用される Moxiecode Plupload におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0237 2013-07-9 18:48 2013-01-24 Show GitHub Exploit DB Packet Storm
219815 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0236 2013-07-9 18:47 2013-01-24 Show GitHub Exploit DB Packet Storm
219816 6.4 警告 WordPress.org - WordPress の XMLRPC API におけるイントラネットサーバへ HTTP リクエストを送信される脆弱性 CWE-Other
その他
CVE-2013-0235 2013-07-9 18:41 2013-01-24 Show GitHub Exploit DB Packet Storm
219817 2.9 注意 シマンテック - Symantec Security Information Manager アプライアンスの管理コンソールにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-1615 2013-07-9 15:23 2013-07-1 Show GitHub Exploit DB Packet Storm
219818 4.3 警告 シマンテック - Symantec Security Information Manager アプライアンスの管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1614 2013-07-9 15:23 2013-07-1 Show GitHub Exploit DB Packet Storm
219819 4.7 警告 シマンテック - Symantec Security Information Manager アプライアンスの管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-1613 2013-07-9 15:22 2013-07-1 Show GitHub Exploit DB Packet Storm
219820 5.1 警告 フォーティネット - Fortinet FortiGate デバイス上で稼働する FortiOS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-1414 2013-07-9 15:21 2013-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278021 - microsoft directx
windows_2000
windows_server_2003
windows_xp
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointe… CWE-20
 Improper Input Validation 
CVE-2009-1538 2019-02-26 23:04 2009-07-16 Show GitHub Exploit DB Packet Storm
278022 - microsoft directx
windows_2000
windows_server_2003
windows_xp
The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate… CWE-94
Code Injection
CVE-2009-1539 2019-02-26 23:04 2009-07-16 Show GitHub Exploit DB Packet Storm
278023 - microsoft windows_2000
windows_server_2003
windows_vista
windows_xp
The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing … CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-1922 2019-02-26 23:04 2009-08-13 Show GitHub Exploit DB Packet Storm
278024 - microsoft windows_2000
windows_server_2003
windows_xp
office_converter_pack
office_word
wordpad
works
Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows r… CWE-189
Numeric Errors
CVE-2009-2506 2019-02-26 23:04 2009-12-10 Show GitHub Exploit DB Packet Storm
278025 - microsoft windows_server_2003
windows_server_2008
The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a… CWE-255
Credentials Management
CVE-2009-2508 2019-02-26 23:04 2009-12-10 Show GitHub Exploit DB Packet Storm
278026 - microsoft windows_server_2003
windows_server_2008
Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated us… CWE-20
 Improper Input Validation 
CVE-2009-2509 2019-02-26 23:04 2009-12-10 Show GitHub Exploit DB Packet Storm
278027 - microsoft windows_2000
windows_server_2003
windows_xp
The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary… CWE-94
Code Injection
CVE-2009-2519 2019-02-26 23:04 2009-09-9 Show GitHub Exploit DB Packet Storm
278028 - microsoft data_engine
sql_server
sql_server_desktop_engine
wmsde
wyukon
windows_server_2008
Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSD… CWE-189
Numeric Errors
CVE-2008-0107 2019-02-26 23:04 2008-07-9 Show GitHub Exploit DB Packet Storm
278029 - microsoft windows-nt
windows_server_2003
windows_server_2008
windows_vista
windows_xp
Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent… CWE-264
Permissions, Privileges, and Access Controls
CVE-2008-1436 2019-02-26 23:04 2008-04-22 Show GitHub Exploit DB Packet Storm
278030 - microsoft windows_2000
windows_server_2003
windows_server_2008
windows_xp
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown vectors related to acce… NVD-CWE-noinfo
CVE-2008-1454 2019-02-26 23:04 2008-07-9 Show GitHub Exploit DB Packet Storm