Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
235331 7.5 危険 novaboard - NovaBoard の header.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0609 2012-09-25 17:38 2010-02-11 Show GitHub Exploit DB Packet Storm
235332 7.5 危険 novaboard - NovaBoard の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0608 2012-09-25 17:38 2010-02-11 Show GitHub Exploit DB Packet Storm
235333 3.5 注意 osTicket - osTicket の scp/ajax.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0606 2012-09-25 17:38 2010-02-9 Show GitHub Exploit DB Packet Storm
235334 7.5 危険 osTicket - osTicket の scp/ajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0605 2012-09-25 17:38 2010-02-9 Show GitHub Exploit DB Packet Storm
235335 4.9 警告 NetBSD - NetBSD における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0561 2012-09-25 17:38 2010-02-2 Show GitHub Exploit DB Packet Storm
235336 4.6 警告 インテル - Intel Desktop Board DB シリーズなどにおける SSM 内の任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0560 2012-09-25 17:38 2010-02-1 Show GitHub Exploit DB Packet Storm
235337 7.5 危険 IBM - IBM Cognos Express における Tomcat Manager コンポーネントへのアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-0557 2012-09-25 17:38 2010-02-3 Show GitHub Exploit DB Packet Storm
235338 9.3 危険 マイクロソフト - Microsoft Internet Explorer 5 から 8 における制限を回避される脆弱性 CWE-Other
その他 		CVE-2010-0555 2012-09-25 17:38 2010-02-3 Show GitHub Exploit DB Packet Storm
235339 4.3 警告 Palo Alto Networks - Palo Alto Networks firewall の esp/editUser.esp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0475 2012-09-25 17:38 2010-05-14 Show GitHub Exploit DB Packet Storm
235340 6.5 警告 Novell - Novell NetWare の FTP server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0625 2012-09-25 17:38 2008-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346671 - aldo_vargas aldos_web_server Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a mal… NVD-CWE-Other
CVE-2004-1990 2017-07-11 10:31 2004-03-3 Show GitHub Exploit DB Packet Storm
346672 - omail omail_webmail The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) i… NVD-CWE-Other
CVE-2004-1993 2017-07-11 10:31 2004-05-4 Show GitHub Exploit DB Packet Storm
346673 - e-zone_media_inc. fusetalk FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm. NVD-CWE-Other
CVE-2004-1994 2017-07-11 10:31 2004-05-5 Show GitHub Exploit DB Packet Storm
346674 - simple_machines smf Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary web script via the size tag. NVD-CWE-Other
CVE-2004-1996 2017-07-11 10:31 2004-05-5 Show GitHub Exploit DB Packet Storm
346675 - kolab
openpkg 		kolab_groupware_server
openpkg 		Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges. NVD-CWE-Other
CVE-2004-1997 2017-07-11 10:31 2004-05-5 Show GitHub Exploit DB Packet Storm
346676 - francisco_burzi php-nuke Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters t… NVD-CWE-Other
CVE-2004-1999 2017-07-11 10:31 2004-05-5 Show GitHub Exploit DB Packet Storm
346677 - sgi irix Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet. NVD-CWE-Other
CVE-2004-2002 2017-07-11 10:31 2004-05-5 Show GitHub Exploit DB Packet Storm
346678 - delegate delegate Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a long (1) subject o… NVD-CWE-Other
CVE-2004-2003 2017-07-11 10:31 2004-05-6 Show GitHub Exploit DB Packet Storm
346679 - suse suse_linux The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH. NVD-CWE-Other
CVE-2004-2004 2017-07-11 10:31 2004-05-6 Show GitHub Exploit DB Packet Storm
346680 - qualcomm eudora Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name. NVD-CWE-Other
CVE-2004-2005 2017-07-11 10:31 2004-05-6 Show GitHub Exploit DB Packet Storm