Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
233721	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4781	2012-12-17 10:52	2012-12-11	Show	GitHub Exploit DB Packet Storm

233722	10	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4786	2012-12-17 10:50	2012-12-11	Show	GitHub Exploit DB Packet Storm

233723	10	危険	マイクロソフト	-	Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4787	2012-12-17 10:49	2012-12-11	Show	GitHub Exploit DB Packet Storm

233724	3.5	注意	マイクロソフト	-	Microsoft Exchange Server 2007 および 2010 におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2012-4791	2012-12-17 10:47	2012-12-11	Show	GitHub Exploit DB Packet Storm

233725	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-5678	2012-12-17 10:45	2012-12-11	Show	GitHub Exploit DB Packet Storm

233726	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-5677	2012-12-17 10:44	2012-12-11	Show	GitHub Exploit DB Packet Storm

233727	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5676	2012-12-17 10:43	2012-12-11	Show	GitHub Exploit DB Packet Storm

233728	10	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意の JavaScript コードを実行される脆弱性	CWE-DesignError	CVE-2012-1967	2012-12-14 18:33	2012-07-17	Show	GitHub Exploit DB Packet Storm

233729	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および Firefox ESR におけるクロスサイトスクリプティングの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1966	2012-12-14 18:32	2012-07-17	Show	GitHub Exploit DB Packet Storm

233730	4.3	警告	Mozilla Foundation	-	Mozilla Firefox におけるクロスサイトスクリプティング保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1965	2012-12-14 18:31	2012-07-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346041	-	cutephp	cutenews	The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false n…	NVD-CWE-Other	CVE-2004-2615	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346042	-	pegasi_web_server	pegasi_web_server	Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the web root via a .. (dot dot) directly after the initial '/' (slash) in the URI.	NVD-CWE-Other	CVE-2004-2617	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346043	-	pegasi_web_server	pegasi_web_server	Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the URI, directly after the initial '/' (slash).	NVD-CWE-Other	CVE-2004-2618	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346044	-	paul_l_daniels	ripmime	ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted.	NVD-CWE-Other	CVE-2004-2619	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346045	-	nortel	contivity	Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates…	NVD-CWE-Other	CVE-2004-2621	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346046	-	altiris	deployment_server_extension_for_ibm_director	AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrato…	NVD-CWE-Other	CVE-2004-2622	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346047	-	matthew_skala	rippy_the_aggregator	Unknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has unknown attack vectors and impact, possibly related to the "user-controlled filter."	NVD-CWE-Other	CVE-2004-2623	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346048	-	wackowiki	wackowiki	Cross-site scripting (XSS) vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter.	NVD-CWE-Other	CVE-2004-2624	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346049	-	outblaze	outblaze_email	Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag.	NVD-CWE-Other	CVE-2004-2625	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm

346050	-	siemens	s55	GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message.	NVD-CWE-Other	CVE-2004-2626	2017-07-20 10:29	2004-12-31	Show	GitHub Exploit DB Packet Storm