Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252531	5	警告	アドビシステムズレッドハットオラクル	-	Adobe Flash Player における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-0579	2011-08-4 09:05	2011-05-12	Show	GitHub Exploit DB Packet Storm

252532	4.9	警告	オラクル	-	Oracle Solaris における Kernel/sockfs の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2290	2011-08-3 10:38	2011-07-19	Show	GitHub Exploit DB Packet Storm

252533	3.6	注意	オラクル	-	Oracle Solaris における LiveUpgrade の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2289	2011-08-3 10:38	2011-07-19	Show	GitHub Exploit DB Packet Storm

252534	10	危険	オラクル	-	Oracle SysFW の Sun Integrated Lights Out Manager における脆弱性	CWE-noinfo 情報不足	CVE-2011-2288	2011-08-3 10:37	2011-07-19	Show	GitHub Exploit DB Packet Storm

252535	7.8	危険	オラクル	-	Oracle Solaris における fingerd の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2287	2011-08-3 10:36	2011-07-19	Show	GitHub Exploit DB Packet Storm

252536	7.2	危険	オラクル	-	Oracle Solaris における Installer の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2285	2011-08-3 10:36	2011-07-19	Show	GitHub Exploit DB Packet Storm

252537	2.1	注意	オラクル	-	Oracle SysFW の Sun Integrated Lights Out Manager における脆弱性	CWE-noinfo 情報不足	CVE-2011-2263	2011-08-3 10:35	2011-07-19	Show	GitHub Exploit DB Packet Storm

252538	5.8	警告	オラクル	-	Oracle Sun Products の Oracle GlassFish Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2260	2011-08-3 10:34	2011-07-19	Show	GitHub Exploit DB Packet Storm

252539	4.9	警告	オラクル	-	Oracle Solaris における UFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2259	2011-08-3 10:33	2011-07-19	Show	GitHub Exploit DB Packet Storm

252540	4.6	警告	オラクル	-	Oracle Solaris における rksh の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2258	2011-08-3 10:32	2011-07-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
317051	-		flatnuke	flatnuke	FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests …	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1892	2024-01-26 06:10	2005-06-9	Show	GitHub Exploit DB Packet Storm

317052	7.8	HIGH Local	silvercity_project	silvercity	SilverCity before 0.9.5-r1 installs (1) cgi-styler-form.py, (2) cgi-styler.py, and (3) source2html.py with read and write world permissions, which allows local users to execute arbitrary code.	CWE-276 Incorrect Default Permissions	CVE-2005-1941	2024-01-26 06:09	2005-06-8	Show	GitHub Exploit DB Packet Storm

317053	-		dlink	dsl-504t_firmware	D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved configuration, via a direct request to firmwarecf…	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1827	2024-01-26 06:08	2005-05-26	Show	GitHub Exploit DB Packet Storm

317054	-		postnuke	postnuke	PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php in the Xanthia module, (3) user.php, (4) thelang.php, (5) …	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1698	2024-01-26 06:08	2005-05-24	Show	GitHub Exploit DB Packet Storm

317055	-		episodex	episodex_guestbook	episodex guestbook allows remote attackers to bypass authentication and edit scripts via a direct request to admin.asp.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1685	2024-01-26 06:07	2005-05-20	Show	GitHub Exploit DB Packet Storm

317056	9.1	CRITICAL Network	midicart	midicart_php midicart_php_plus midicart_php_maxi	MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to adm…	CWE-425 Direct Request ('Forced Browsing')	CVE-2002-1798	2024-01-26 06:04	2002-12-31	Show	GitHub Exploit DB Packet Storm

317057	-		hostingcontroller	hosting_controller	Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1654	2024-01-26 06:03	2005-05-18	Show	GitHub Exploit DB Packet Storm

317058	-		yusasp	web_asset_manager	YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp.	CWE-425 Direct Request ('Forced Browsing')	CVE-2005-1668	2024-01-26 06:03	2005-05-18	Show	GitHub Exploit DB Packet Storm

317059	7.5	HIGH Network	iomega	nas_a300u_firmware	The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2002-1949	2024-01-26 06:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

317060	7.5	HIGH Network	procom	netforce_800_firmware	Procom NetFORCE 800 4.02 M10 Build 20 and possibly other versions sends the NIS password map (passwd.nis) as a file attachment in diagnostic e-mail messages, which allows remote attackers to obtain t…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2005-3140	2024-01-26 05:58	2005-10-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed