Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249141	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の navigator.plugins の実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2767	2011-05-16 11:09	2010-09-7	Show	GitHub Exploit DB Packet Storm

249142	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の normalizeDocument 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2766	2011-05-16 11:08	2010-09-7	Show	GitHub Exploit DB Packet Storm

249143	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の FRAMESET 要素の実装における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2765	2011-05-16 11:07	2010-09-7	Show	GitHub Exploit DB Packet Storm

249144	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTreeSelection 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2760	2011-05-16 11:05	2010-09-7	Show	GitHub Exploit DB Packet Storm

249145	3.7	注意	オラクル	-	Oracle Solaris における LOFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0839	2011-05-13 11:37	2011-04-19	Show	GitHub Exploit DB Packet Storm

249146	4.9	警告	オラクル	-	Oracle Solaris における Kernel/SPARC の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-0829	2011-05-13 11:36	2011-04-19	Show	GitHub Exploit DB Packet Storm

249147	4.3	警告	オラクル	-	Oracle PeopleSoft Enterprise の Application Portal における脆弱性	CWE-noinfo 情報不足	CVE-2011-0828	2011-05-13 11:35	2011-04-19	Show	GitHub Exploit DB Packet Storm

249148	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0827	2011-05-13 11:34	2011-04-19	Show	GitHub Exploit DB Packet Storm

249149	3.5	注意	オラクル	-	Oracle PeopleSoft Enterprise の Application Portal における脆弱性	CWE-noinfo 情報不足	CVE-2011-0826	2011-05-13 11:34	2011-04-19	Show	GitHub Exploit DB Packet Storm

249150	6.8	警告	オラクル	-	Oracle JD Edwards EnterpriseOne Tools および OneWorld Tools における脆弱性	CWE-noinfo 情報不足	CVE-2011-0825	2011-05-13 11:33	2011-04-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307021	-	swsoft	confixx	SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.	NVD-CWE-Other	CVE-2005-1302	2016-10-18 12:18	2005-05-2	Show	GitHub Exploit DB Packet Storm

307022	-	citat.pl	citat.pl	The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.	NVD-CWE-Other	CVE-2005-1303	2016-10-18 12:18	2005-04-24	Show	GitHub Exploit DB Packet Storm

307023	-	-	-	The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.	NVD-CWE-Other	CVE-2005-1304	2016-10-18 12:18	2005-05-2	Show	GitHub Exploit DB Packet Storm

307024	-	hyper.cgi	hyper.cgi	The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.	NVD-CWE-Other	CVE-2005-1305	2016-10-18 12:18	2005-05-2	Show	GitHub Exploit DB Packet Storm

307025	-	matthieu_aubry	phpmyvisites	set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.	NVD-CWE-Other	CVE-2005-1325	2016-10-18 12:18	2005-05-2	Show	GitHub Exploit DB Packet Storm

307026	-	rsnapshot	filesystem_snapshot_utility	The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access t…	NVD-CWE-Other	CVE-2005-1064	2016-10-18 12:17	2005-04-10	Show	GitHub Exploit DB Packet Storm

307027	-	-	-	SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter.	NVD-CWE-Other	CVE-2005-1071	2016-10-18 12:17	2005-04-12	Show	GitHub Exploit DB Packet Storm

307028	-	xampp	apache_distribution	Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.4.x allow remote attackers to inject arbitrary web script or HTML via (1) cds.php, (2) Guestbook-EN.pl, or (3) phonebook.php.	NVD-CWE-Other	CVE-2005-1077	2016-10-18 12:17	2005-04-12	Show	GitHub Exploit DB Packet Storm

307029	-	xampp	apache_distribution	XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.	NVD-CWE-Other	CVE-2005-1078	2016-10-18 12:17	2005-04-12	Show	GitHub Exploit DB Packet Storm

307030	-	-	-	SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.	NVD-CWE-Other	CVE-2005-1079	2016-10-18 12:17	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed