Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241551 6.8 警告 Tecnick.com - TCExam における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4237 2012-08-22 16:43 2012-08-6 Show GitHub Exploit DB Packet Storm
241552 4.3 警告 Jease - Jease におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4052 2012-08-22 16:42 2012-08-20 Show GitHub Exploit DB Packet Storm
241553 4.3 警告 Total Shop UK - Total Shop UK eCommerce Open Source におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4236 2012-08-22 16:40 2012-08-20 Show GitHub Exploit DB Packet Storm
241554 4.9 警告 OpenStack - OpenStack Compute (Nova) の virt/disk/api.py における任意のファイルを上書される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3447 2012-08-22 16:34 2012-07-31 Show GitHub Exploit DB Packet Storm
241555 5 警告 Debian - devotee における秘密のあだ名を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2387 2012-08-22 16:24 2012-08-20 Show GitHub Exploit DB Packet Storm
241556 5 警告 GNOME Project - libsoup における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2012-2132 2012-08-22 16:20 2011-12-15 Show GitHub Exploit DB Packet Storm
241557 6.8 警告 Libav - Libav の libavcodec におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0947 2012-08-22 16:19 2012-05-4 Show GitHub Exploit DB Packet Storm
241558 4.3 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー 		CVE-2011-4579 2012-08-22 15:26 2011-12-25 Show GitHub Exploit DB Packet Storm
241559 6.8 警告 FFmpeg
Libav		 - FFmpeg および Libav の libavcodec におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4364 2012-08-22 15:25 2011-12-25 Show GitHub Exploit DB Packet Storm
241560 4.3 警告 FFmpeg
Libav		 - FFmpeg および Libav におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-4353 2012-08-22 15:24 2011-12-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346151 - - - The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service (crash) via requests with two percent (%) signs in… NVD-CWE-Other
CVE-2004-2318 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346152 - ibm informix_dynamic_server
informix_extended_parallel_server 		IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tm… NVD-CWE-Other
CVE-2004-2319 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346153 - bea weblogic_server The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote… CWE-200
Information Exposure 		CVE-2004-2320 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346154 - bea weblogic_server BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean attributes, including (1) ServerStartMBean.Password and (2) Nod… NVD-CWE-Other
CVE-2004-2321 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346155 - phpwebsite phpwebsite SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter… NVD-CWE-Other
CVE-2004-2322 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346156 - vizer_web_server vizer_web_server Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET … NVD-CWE-Other
CVE-2004-2327 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346157 - clearswift mailsweeper Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached. NVD-CWE-Other
CVE-2004-2328 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346158 - kerio personal_firewall Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges … NVD-CWE-Other
CVE-2004-2329 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346159 - macromedia coldfusion ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields. NVD-CWE-Other
CVE-2004-2330 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346160 - cpan www_form Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2004-2332 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm