Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221071 5.8 警告 Apache Software Foundation - Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 - CVE-2012-5633 2013-03-25 16:00 2012-11-14 Show GitHub Exploit DB Packet Storm
221072 7.5 危険 tg0 - Ruby 用 Curl Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2617 2013-03-25 14:21 2013-03-12 Show GitHub Exploit DB Packet Storm
221073 7.5 危険 Hampton Catlin - Ruby 用 MiniMagick Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2616 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
221074 7.5 危険 Daniel Choi - Ruby 用 fastreader Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2615 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
221075 7.5 危険 Stefaan Colman - Ruby 用 command_wrap Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1875 2013-03-25 14:19 2013-03-18 Show GitHub Exploit DB Packet Storm
221076 6.2 警告 Schweitzer Engineering Laboratories - Schweitzer Engineering Laboratories の AcSELerator QuickSet における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0665 2013-03-25 14:12 2013-03-20 Show GitHub Exploit DB Packet Storm
221077 4.3 警告 シーメンス - Siemens WinCC の HMI Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0667 2013-03-25 11:35 2013-03-15 Show GitHub Exploit DB Packet Storm
221078 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1750 2013-03-22 16:20 2013-03-15 Show GitHub Exploit DB Packet Storm
221079 2.1 注意 Mathijs Koenraadt - Drupal 用 Search API Sorts モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0227 2013-03-22 16:16 2013-01-23 Show GitHub Exploit DB Packet Storm
221080 6 警告 Ivan Zugec - Drupal 用 Keyboard Shortcut Utility モジュールにおけるノードを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0226 2013-03-22 16:16 2013-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314791 - plesk plesk_server_administrator Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain. NVD-CWE-Other
CVE-2001-1222 2008-09-6 05:25 2002-03-25 Show GitHub Exploit DB Packet Storm
314792 - elsa lancom_1100_office The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server. NVD-CWE-Other
CVE-2001-1223 2008-09-6 05:25 2001-12-26 Show GitHub Exploit DB Packet Storm
314793 - lightwave consoleserver The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users. NVD-CWE-Other
CVE-2001-0396 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
314794 - silent_runner silent_runner_collector_src Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command. NVD-CWE-Other
CVE-2001-0397 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
314795 - ritlabs the_bat The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also caus… NVD-CWE-Other
CVE-2001-0398 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
314796 - matt_tourtillott nph-maillist nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address. NVD-CWE-Other
CVE-2001-0400 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
314797 - samba samba Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient. NVD-CWE-Other
CVE-2001-0406 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
314798 - ncm ncm_content_management_system content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter. NVD-CWE-Other
CVE-2001-0418 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
314799 - way_to_the_web talkback Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the article parameter. NVD-CWE-Other
CVE-2001-0420 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
314800 - adcycle adcycle AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to ver… NVD-CWE-Other
CVE-2001-0425 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm