Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220301 4.9 警告 マイクロソフト - Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3661 2013-05-29 16:54 2013-05-17 Show GitHub Exploit DB Packet Storm
220302 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2959 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
220303 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2957 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
220304 7.5 危険 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-2956 2013-05-29 16:36 2013-05-13 Show GitHub Exploit DB Packet Storm
220305 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2955 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
220306 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-2954 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
220307 4.3 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2013-2953 2013-05-29 16:30 2013-05-13 Show GitHub Exploit DB Packet Storm
220308 5.8 警告 シスコシステムズ - iOS 上で稼働する Cisco WebEx における SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6399 2013-05-29 16:30 2013-05-27 Show GitHub Exploit DB Packet Storm
220309 5 警告 Moodle - Moodle の lib/formslib.php におけるフォームデータのフィルタリングを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2083 2013-05-29 14:34 2013-05-21 Show GitHub Exploit DB Packet Storm
220310 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2082 2013-05-29 14:33 2013-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278791 - openbsd openbsd The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (panic) via crafted TCP packets. NOTE: some of these details are obtained from thi… NVD-CWE-Other
CVE-2008-1058 2018-10-31 01:25 2008-02-29 Show GitHub Exploit DB Packet Storm
278792 - microsoft word Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. N… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-1092 2018-10-31 01:25 2008-03-26 Show GitHub Exploit DB Packet Storm
278793 - sun solaris
sunos 		Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) vi… NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1095 2018-10-31 01:25 2008-02-29 Show GitHub Exploit DB Packet Storm
278794 - sun sunos A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner unintended by the ven… NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1369 2018-10-31 01:25 2008-03-19 Show GitHub Exploit DB Packet Storm
278795 - sun sunos Sun link will not execute. NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-1369 2018-10-31 01:25 2008-03-19 Show GitHub Exploit DB Packet Storm
278796 - microsoft windows_2000
windows_2003_server 		The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a craf… CWE-20
 Improper Input Validation  		CVE-2008-1451 2018-10-31 01:25 2008-06-12 Show GitHub Exploit DB Packet Storm
278797 - microsoft windows-nt
windows_2000
windows_2003_server
windows_vista
windows_xp 		Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute … CWE-20
 Improper Input Validation  		CVE-2008-1456 2018-10-31 01:25 2008-08-13 Show GitHub Exploit DB Packet Storm
278798 - microsoft windows-nt
windows_2000
windows_2003_server
windows_vista
windows_xp 		The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote aut… CWE-20
 Improper Input Validation  		CVE-2008-1457 2018-10-31 01:25 2008-08-13 Show GitHub Exploit DB Packet Storm
278799 - sun solaris
sunos 		rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request. NVD-CWE-Other
CVE-2008-1480 2018-10-31 01:25 2008-03-25 Show GitHub Exploit DB Packet Storm
278800 - f5 tmos Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object, or the (2… CWE-79
Cross-site Scripting 		CVE-2008-1503 2018-10-31 01:25 2008-03-26 Show GitHub Exploit DB Packet Storm