Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222761 4.3 警告 YABSoft - YABSoft AIH Script の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4266 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
222762 9.3 危険 pointdev - Ideal Administration 2009 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4265 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
222763 7.5 危険 ptcpay - PTCPay GeN3 forum の main_forum.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4263 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
222764 7.5 危険 Ganeti project - Ganeti の iallocator フレームワークにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4261 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
222765 7.5 危険 truesolution - AlefMentor の cource.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4256 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
222766 4.3 警告 youjoomla - Joomla! 用の You!Hostit! におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4255 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
222767 5 警告 phpee - PowerPhlogger における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-4254 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
222768 4.3 警告 phpee - PowerPhlogger の dspStats.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4253 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
222769 6.5 警告 TestLink Development Team - TestLink における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4238 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
222770 3.5 注意 TestLink Development Team - TestLink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4237 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278981 - php php Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives. NVD-CWE-Other
CVE-2005-3392 2018-10-31 01:25 2005-11-1 Show GitHub Exploit DB Packet Storm
278982 - sun solaris
sunos 		The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive info… CWE-200
Information Exposure 		CVE-2005-3398 2018-10-31 01:25 2005-11-1 Show GitHub Exploit DB Packet Storm
278983 - vmware esx Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 allows allows re… NVD-CWE-Other
CVE-2005-3618 2018-10-31 01:25 2005-12-31 Show GitHub Exploit DB Packet Storm
278984 - vmware esx Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allo… NVD-CWE-Other
CVE-2005-3619 2018-10-31 01:25 2005-12-31 Show GitHub Exploit DB Packet Storm
278985 - vmware esx This vulnerability is addressed in the following product releases: VMware, ESX Server, 2.5.2 upgrade patch 2, and later VMware, ESX Server, 2.1.2 upgrade patch 6, and later VMware, ESX Server, 2.0… NVD-CWE-Other
CVE-2005-3619 2018-10-31 01:25 2005-12-31 Show GitHub Exploit DB Packet Storm
278986 - vmware esx The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-rea… NVD-CWE-Other
CVE-2005-3620 2018-10-31 01:25 2005-12-31 Show GitHub Exploit DB Packet Storm
278987 - sun solaris
sunos 		Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries." NVD-CWE-Other
CVE-2005-3781 2018-10-31 01:25 2005-11-23 Show GitHub Exploit DB Packet Storm
278988 - php php CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument. NVD-CWE-Other
CVE-2005-3883 2018-10-31 01:25 2005-11-29 Show GitHub Exploit DB Packet Storm
278989 - ffmpeg ffmpeg Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4)… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-4048 2018-10-31 01:25 2005-12-7 Show GitHub Exploit DB Packet Storm
278990 - vmware ace
gsx_server
player
workstation 		Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, includ… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-4459 2018-10-31 01:25 2005-12-22 Show GitHub Exploit DB Packet Storm