Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253381	4.3	警告	Apache Software Foundation レッドハット	-	Apache Struts におけるクロスサイトスクリプティングの脆弱性	-	CVE-2005-3745	2011-06-10 09:49	2005-11-22	Show	GitHub Exploit DB Packet Storm

253382	4.6	警告	Linux レッドハット	-	Linux kernel の bond_select_queue 関数におけるサービス運用妨害 (DoS）の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1581	2011-06-9 10:31	2011-05-18	Show	GitHub Exploit DB Packet Storm

253383	10	危険	Google レッドハット	-	Google Chrome におけるアドレスバーを偽装される脆弱性	CWE-DesignError	CVE-2010-3115	2011-06-9 10:30	2010-08-19	Show	GitHub Exploit DB Packet Storm

253384	10	危険	Google レッドハット	-	Google Chrome の text-editing 実装における脆弱性	CWE-399 リソース管理の問題	CVE-2010-3114	2011-06-9 10:30	2010-08-19	Show	GitHub Exploit DB Packet Storm

253385	10	危険	Google レッドハット	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-3113	2011-06-9 10:29	2010-08-19	Show	GitHub Exploit DB Packet Storm

253386	10	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-3112	2011-06-9 10:29	2010-08-19	Show	GitHub Exploit DB Packet Storm

253387	10	危険	Google	-	Google Chrome における脆弱性	CWE-noinfo 情報不足	CVE-2010-3111	2011-06-9 10:28	2010-08-19	Show	GitHub Exploit DB Packet Storm

253388	9.3	危険	Google	-	Google Chrome にて使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1825	2011-06-9 10:28	2010-09-14	Show	GitHub Exploit DB Packet Storm

253389	9.3	危険	アップル Google	-	Google Chrome にて使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1824	2011-06-9 10:28	2010-09-14	Show	GitHub Exploit DB Packet Storm

253390	5	警告	Google	-	Google Chrome における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3417	2011-06-9 10:27	2010-09-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
317461	7.8	HIGH Local	isc	bind	dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which al…	CWE-276 Incorrect Default Permissions	CVE-2001-0497	2024-02-9 00:49	2001-07-21	Show	GitHub Exploit DB Packet Storm

317462	7.5	HIGH Network	aol	aim	The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (crash) via a malformed buddy icon that causes an integer under…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2005-1891	2024-02-9 00:44	2005-06-9	Show	GitHub Exploit DB Packet Storm

317463	9.8	CRITICAL Network	barton	ngircd	Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2005-0199	2024-02-9 00:43	2005-05-2	Show	GitHub Exploit DB Packet Storm

317464	7.5	HIGH Network	samba canonical	ppp ubuntu_linux	Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an inco…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2004-1002	2024-02-9 00:43	2005-03-1	Show	GitHub Exploit DB Packet Storm

317465	7.5	HIGH Network	linux	linux_kernel	Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2004-0816	2024-02-9 00:28	2004-12-23	Show	GitHub Exploit DB Packet Storm

317466	9.8	CRITICAL Network	symantec	liveupdate	Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com…	CWE-494 Download of Code Without Integrity Check	CVE-2001-1125	2024-02-8 11:28	2001-10-5	Show	GitHub Exploit DB Packet Storm

317467	9.8	CRITICAL Network	phpgedview	phpgedview	PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modi…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2004-0030	2024-02-8 11:27	2004-01-20	Show	GitHub Exploit DB Packet Storm

317468	9.8	CRITICAL Network	acme	thttpd	Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.	CWE-193 Off-by-one Error	CVE-2001-1496	2024-02-8 11:19	2001-12-31	Show	GitHub Exploit DB Packet Storm

317469	9.8	CRITICAL Network	mbedthis	appweb_http_server	Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.	CWE-178 Improper Handling of Case Sensitivity	CVE-2004-2214	2024-02-8 11:12	2004-12-31	Show	GitHub Exploit DB Packet Storm

317470	9.8	CRITICAL Network	novell	edirectory	Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing.	CWE-178 Improper Handling of Case Sensitivity	CVE-2002-2119	2024-02-8 11:12	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed