Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251471	5.8	警告	Laurent Destailleur	-	AWStats におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2009-5020	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

251472	5	警告	webwiz	-	Web Wiz NewsPad におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-5019	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251473	4.3	警告	mark pilgrim	-	Universal Feed Parser の feedparser.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5065	2012-03-27 18:42	2009-11-18	Show	GitHub Exploit DB Packet Storm

251474	6.8	警告	レッドハット	-	Red Hat Network Satellite およびその他の製品の Spacewalk におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4139	2012-03-27 18:42	2011-06-16	Show	GitHub Exploit DB Packet Storm

251475	5	警告	Stichting NLnet Labs	-	Unbound におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4008	2012-03-27 18:42	2011-06-2	Show	GitHub Exploit DB Packet Storm

251476	6.4	警告	レッドハット	-	RHN Satellite Server における不適切なプロキシとして利用される脆弱性	CWE-200 情報漏えい	CVE-2009-0788	2012-03-27 18:42	2011-04-11	Show	GitHub Exploit DB Packet Storm

251477	4.3	警告	Mozilla Foundation	-	Mozilla Firefox におけるクロスサイトスクリプティングの保護機能を回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5017	2012-03-27 18:42	2010-11-12	Show	GitHub Exploit DB Packet Storm

251478	7.5	危険	turbogears	-	TurboGears2 の URL ディスパッチメカニズムにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-5015	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

251479	7.5	危険	turbogears	-	TurboGears2 のデフォルトのクイックスタートの設定における repoze.who 認証を回避される脆弱性	CWE-310 暗号の問題	CVE-2009-5014	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

251480	5	警告	infradead	-	OpenConnect におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-5009	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
300961	-	microsoft	windows_server_2008 windows_7 windows_xp windows_server_2003 windows_vista	Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and …	NVD-CWE-Other	CVE-2012-0013	2024-11-21 10:34	2012-01-11	Show	GitHub Exploit DB Packet Storm

300962	-	microsoft	windows_xp windows_server_2003	Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse execu…	NVD-CWE-Other	CVE-2012-0009	2024-11-21 10:34	2012-01-11	Show	GitHub Exploit DB Packet Storm

300963	-	microsoft	anti-cross_site_scripting_library	The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remot…	CWE-79 Cross-site Scripting	CVE-2012-0007	2024-11-21 10:34	2012-01-11	Show	GitHub Exploit DB Packet Storm

300964	-	microsoft	windows_server_2008 windows_xp windows_server_2003 windows_vista	The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean syste…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0005	2024-11-21 10:34	2012-01-11	Show	GitHub Exploit DB Packet Storm

300965	-	microsoft	windows_server_2008 windows_xp windows_7 windows_server_2003 windows_vista	Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1…	NVD-CWE-noinfo	CVE-2012-0004	2024-11-21 10:34	2012-01-11	Show	GitHub Exploit DB Packet Storm

300966	-	microsoft	windows_server_2008 windows_7 windows_xp windows_server_2003 windows_vista	Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote a…	NVD-CWE-noinfo	CVE-2012-0003	2024-11-21 10:34	2012-01-11	Show	GitHub Exploit DB Packet Storm

300967	-	microsoft	windows_server_2008 windows_7 windows_xp windows_server_2003 windows_vista	The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception han…	NVD-CWE-Other	CVE-2012-0001	2024-11-21 10:34	2012-01-11	Show	GitHub Exploit DB Packet Storm

300968	-	apache	struts	The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor chara…	CWE-94 Code Injection	CVE-2012-0394	2024-11-21 10:34	2012-01-9	Show	GitHub Exploit DB Packet Storm

300969	-	apache	struts	The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted p…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0393	2024-11-21 10:34	2012-01-9	Show	GitHub Exploit DB Packet Storm

300970	-	apache	struts	The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header…	NVD-CWE-noinfo	CVE-2012-0392	2024-11-21 10:34	2012-01-9	Show	GitHub Exploit DB Packet Storm