Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241041	4.3	警告	シスコシステムズ	-	Cisco MP におけるクロスサイトスクリプティングの脆弱性	-	CVE-2007-4284	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

241042	7.5	危険	Coppermine Photo Gallery	-	CPG の bridge/yabbse.inc.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-4283	2012-06-26 15:54	2007-08-9	Show	GitHub Exploit DB Packet Storm

241043	3.5	注意	Digium	-	Asterisk Open Source の Skinny チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4280	2012-06-26 15:54	2007-08-7	Show	GitHub Exploit DB Packet Storm

241044	7.5	危険	FrontAccounting	-	FrontAccounting の config.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-4279	2012-06-26 15:54	2007-08-9	Show	GitHub Exploit DB Packet Storm

241045	7.5	危険	Esri	-	ESRI ArcSDE サービスの giomgr プロセスにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4278	2012-06-26 15:54	2007-08-15	Show	GitHub Exploit DB Packet Storm

241046	7.5	危険	ez photo sales	-	EZPhotoSales におけるパスワードをダウンロードされる脆弱性	CWE-255 証明書・パスワード管理	CVE-2007-4261	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

241047	5	警告	ez photo sales	-	EZPhotoSales における任意のギャラリーへアクセスされる脆弱性	-	CVE-2007-4260	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

241048	5	警告	ez photo sales	-	EZPhoteSales における任意のイメージファイルをダウンロードされる脆弱性	-	CVE-2007-4259	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

241049	7.5	危険	envolution	-	Envolution の News モジュールにおける SQL インジェクションの脆弱性	-	CVE-2007-4253	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

241050	4.3	警告	chilkat software	-	CkString.dll および CHILKAT ASP String の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性	-	CVE-2007-4252	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290911	-	avaya redhat	cvlan enterprise_linux enterprise_linux_desktop linux_advanced_workstation	Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.	NVD-CWE-Other	CVE-2004-0494	2017-10-11 10:29	2004-11-23	Show	GitHub Exploit DB Packet Storm

290912	-	avaya gentoo linux redhat suse conectiva	converged_communications_server modular_messaging_message_storage_server linux linux_kernel enterprise_linux suse_linux intuity_audix suse_email_server suse_linux_admin-cd_for…	Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.	NVD-CWE-Other	CVE-2004-0495	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

290913	-	mandrakesoft conectiva gentoo linux redhat suse trustix	mandrake_multi_network_firewall linux linux_kernel mandrake_linux mandrake_linux_corporate_server enterprise_linux suse_linux secure_linux	Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.	NVD-CWE-Other	CVE-2004-0497	2017-10-11 10:29	2004-12-6	Show	GitHub Exploit DB Packet Storm

290914	-	rob_flynn gentoo mandrakesoft	gaim linux mandrake_linux	Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protoco…	NVD-CWE-Other	CVE-2004-0500	2017-10-11 10:29	2004-09-28	Show	GitHub Exploit DB Packet Storm

290915	-	sgi squirrelmail	propack squirrelmail	Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple …	NVD-CWE-Other	CVE-2004-0519	2017-10-11 10:29	2004-08-18	Show	GitHub Exploit DB Packet Storm

290916	-	open_webmail sgi squirrelmail	open_webmail propack squirrelmail	Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using …	NVD-CWE-Other	CVE-2004-0520	2017-10-11 10:29	2004-08-18	Show	GitHub Exploit DB Packet Storm

290917	-	sgi squirrelmail	propack squirrelmail	SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.	NVD-CWE-Other	CVE-2004-0521	2017-10-11 10:29	2004-08-18	Show	GitHub Exploit DB Packet Storm

290918	-	mandrakesoft suse conectiva engardelinux gentoo linux	mandrake_multi_network_firewall suse_email_server suse_linux_admin-cd_for_firewall suse_linux_connectivity_server suse_linux_database_server suse_linux_firewall_cd suse_linux_firewa…	The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally …	NVD-CWE-Other	CVE-2004-0535	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

290919	-	avaya gentoo linux redhat suse conectiva	converged_communications_server modular_messaging_message_storage_server linux linux_kernel enterprise_linux suse_linux intuity_audix suse_email_server suse_linux_admin-cd_for…	Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and …	NVD-CWE-Other	CVE-2004-0554	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

290920	-	sox conectiva gentoo redhat	sox linux enterprise_linux enterprise_linux_desktop fedora_core	Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.	NVD-CWE-Other	CVE-2004-0557	2017-10-11 10:29	2004-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed