Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251221	5	警告	アップルサイバートラスト株式会社 PNG Development Group オラクル VMware レッドハット	-	libpng に含まれる pngrutil.c におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-2249	2012-03-27 10:32	2010-06-26	Show	GitHub Exploit DB Packet Storm

251222	7.5	危険	アップルサイバートラスト株式会社 Mozilla Foundation PNG Development Group オラクル VMware フェンリル株式会社レッドハット	-	libpng に脆弱性	CWE-119 バッファエラー	CVE-2010-1205	2012-03-27 10:29	2010-07-6	Show	GitHub Exploit DB Packet Storm

251223	7.8	危険	アップルサイバートラスト株式会社 PNG Development Group Lunascape オラクル VMware フェンリル株式会社レッドハット	-	libpng における圧縮された補助チャンクの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-0205	2012-03-27 10:22	2010-03-4	Show	GitHub Exploit DB Packet Storm

251224	7.5	危険	クアンタムデル IBM	-	複数のテープライブラリ製品におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-1844	2012-03-26 18:12	2012-03-22	Show	GitHub Exploit DB Packet Storm

251225	5	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1841	2012-03-26 18:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251226	5	警告	LG-Nortel	-	LG-Nortel ELO GS24M に複数の脆弱性	CWE-287 不適切な認証	CVE-2012-1838	2012-03-26 16:29	2012-03-22	Show	GitHub Exploit DB Packet Storm

251227	7.5	危険	Webglimpse	-	WebGlimpse に OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1795	2012-03-26 16:24	2012-03-20	Show	GitHub Exploit DB Packet Storm

251228	7.5	危険	Pydio	-	AjaXplorer におけるログインのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-1840	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251229	7.5	危険	Pydio	-	AjaXplorer の Get Template 機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1839	2012-03-26 16:08	2012-03-22	Show	GitHub Exploit DB Packet Storm

251230	5	警告	IBM	-	IBM Tivoli Endpoint Manager における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1837	2012-03-26 16:07	2012-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352471	-	socialmpn	socialmpn	Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to article.php, (2) uname parameter to user.php, (3) siteid para…	NVD-CWE-Other	CVE-2005-2031	2008-09-6 05:50	2005-06-16	Show	GitHub Exploit DB Packet Storm

352472	-	fortibus	fortibus_cms	Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page.	NVD-CWE-Other	CVE-2005-2038	2008-09-6 05:50	2005-06-20	Show	GitHub Exploit DB Packet Storm

352473	-	nanoblogger	nanoblogger	Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-2005-2039	2008-09-6 05:50	2005-06-19	Show	GitHub Exploit DB Packet Storm

352474	-	telnetd	telnetd	Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CV…	NVD-CWE-Other	CVE-2005-2040	2008-09-6 05:50	2005-06-20	Show	GitHub Exploit DB Packet Storm

352475	-	ajax-spell	ajax-spell	Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags.	NVD-CWE-Other	CVE-2005-2042	2008-09-6 05:50	2005-06-16	Show	GitHub Exploit DB Packet Storm

352476	-	xampp	apache_distribution	Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php.	NVD-CWE-Other	CVE-2005-2043	2008-09-6 05:50	2005-06-17	Show	GitHub Exploit DB Packet Storm

352477	-	adaptive_technology_resource_centre	atutor	Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to browse.php, (2) sub…	NVD-CWE-Other	CVE-2005-2044	2008-09-6 05:50	2005-06-16	Show	GitHub Exploit DB Packet Storm

352478	-	realnetworks	realone_player realplayer	Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafte…	NVD-CWE-Other	CVE-2005-2054	2008-09-6 05:50	2005-06-29	Show	GitHub Exploit DB Packet Storm

352479	-	realnetworks	realone_player realplayer	RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settin…	NVD-CWE-Other	CVE-2005-2055	2008-09-6 05:50	2005-06-29	Show	GitHub Exploit DB Packet Storm

352480	-	freebsd	freebsd	FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session.	NVD-CWE-Other	CVE-2005-2068	2008-09-6 05:50	2005-07-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed