Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251281 4.3 警告 Annuaire PHP - Annuaire PHP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0899 2012-01-25 10:32 2012-01-20 Show GitHub Exploit DB Packet Storm
251282 5 警告 camaleo - WordPress 用 myEASYbackup プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0898 2012-01-25 10:30 2012-01-20 Show GitHub Exploit DB Packet Storm
251283 5 警告 Tom Braider - WordPress 用 Count Per Day モジュールにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0896 2012-01-25 10:23 2012-01-20 Show GitHub Exploit DB Packet Storm
251284 4.3 警告 Tom Braider - WordPress 用 Count Per Day モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0895 2012-01-25 10:21 2012-01-20 Show GitHub Exploit DB Packet Storm
251285 9.3 危険 IBM - IBM Lotus Symphony の vclmi.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0192 2012-01-24 16:45 2012-01-23 Show GitHub Exploit DB Packet Storm
251286 7.5 危険 アドビシステムズ
Linux		 - Linux 上で稼働する Adobe Reader における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4374 2012-01-24 16:29 2011-09-13 Show GitHub Exploit DB Packet Storm
251287 5 警告 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0193 2012-01-24 16:21 2012-01-17 Show GitHub Exploit DB Packet Storm
251288 10 危険 IBM - IBM Rational License Key Server その他の製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1389 2012-01-24 16:19 2012-01-19 Show GitHub Exploit DB Packet Storm
251289 10 危険 フレクセラ・ソフトウェア合同会社 - Flexera FlexNet Publisher の lmgrd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4135 2012-01-24 16:02 2011-08-16 Show GitHub Exploit DB Packet Storm
251290 10 危険 フレクセラ・ソフトウェア合同会社 - Flexera FlexNet Publisher の lmadmin におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4134 2012-01-24 15:42 2011-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306061 6.5 MEDIUM
Network 		gnu
apple 		groff
mac_os_x 		contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbi… CWE-254
 7PK - Security Features 		CVE-2009-5078 2024-11-21 10:11 2011-07-1 Show GitHub Exploit DB Packet Storm
306062 - apple
gnu 		mac_os_x
groff 		contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file. CWE-59
Link Following 		CVE-2009-5044 2024-11-21 10:11 2011-06-25 Show GitHub Exploit DB Packet Storm
306063 - creloaded cre_loaded CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) i… CWE-287
Improper Authentication 		CVE-2009-5077 2024-11-21 10:11 2011-06-9 Show GitHub Exploit DB Packet Storm
306064 - creloaded cre_loaded CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password… CWE-287
Improper Authentication 		CVE-2009-5076 2024-11-21 10:11 2011-06-8 Show GitHub Exploit DB Packet Storm
306065 - viewvc viewvc ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter, as demonstrated by a … CWE-399
 Resource Management Errors 		CVE-2009-5024 2024-11-21 10:11 2011-05-24 Show GitHub Exploit DB Packet Storm
306066 - zeacom chat_server Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or… CWE-310
Cryptographic Issues 		CVE-2010-0217 2024-11-21 10:11 2011-05-21 Show GitHub Exploit DB Packet Storm
306067 - monkeysaudio monkey\'s_audio Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE file. CWE-399
 Resource Management Errors 		CVE-2009-5075 2024-11-21 10:11 2011-05-21 Show GitHub Exploit DB Packet Storm
306068 - inventivetec mediacast authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the Us… CWE-310
Cryptographic Issues 		CVE-2010-0216 2024-11-21 10:11 2011-05-11 Show GitHub Exploit DB Packet Storm
306069 - libtiff libtiff Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-5022 2024-11-21 10:11 2011-05-4 Show GitHub Exploit DB Packet Storm
306070 - mojolicious mojolicious Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250 has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2009-5074 2024-11-21 10:11 2011-05-3 Show GitHub Exploit DB Packet Storm