Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253711	6.9	警告	マイクロソフト	-	Microsoft Windows の Active Directory フェデレーションサービスのシングルサインオン実装における認証情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2009-2508	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

253712	6.8	警告	マイクロソフト	-	Microsoft Windows の LSASS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3675	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

253713	9.3	危険	マイクロソフト	-	Microsoft Project における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-0102	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

253714	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3673	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

253715	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3671	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

253716	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性	CWE-255 CWE-94	CVE-2009-3677	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

253717	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2505	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

253718	6.9	警告	acpid	-	acpid の umask におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4235	2010-01-21 11:44	2009-12-7	Show	GitHub Exploit DB Packet Storm

253719	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

253720	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313361	5.5	MEDIUM Local	pgp	freeware corporate_desktop personal_security	An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to str…	CWE-459 Incomplete Cleanup	CVE-2002-0788	2024-02-9 05:13	2002-08-12	Show	GitHub Exploit DB Packet Storm

313362	5.5	MEDIUM Local	icq	icq	ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information.	CWE-459 Incomplete Cleanup	CVE-2000-0552	2024-02-9 05:12	2000-06-6	Show	GitHub Exploit DB Packet Storm

313363	9.8	CRITICAL Network	risearch	risearch risearch_pro	RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, o…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2004-2061	2024-02-9 04:56	2004-07-27	Show	GitHub Exploit DB Packet Storm

313364	9.8	CRITICAL Network	siemens	db4web	DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that sp…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2002-1484	2024-02-9 04:56	2003-04-22	Show	GitHub Exploit DB Packet Storm

313365	7.5	HIGH Network	adobe	acrobat_reader acrobat	The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulne…	CWE-611 XXE	CVE-2005-1306	2024-02-9 04:55	2005-06-15	Show	GitHub Exploit DB Packet Storm

313366	5.5	MEDIUM Local	dump_project	dump	dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.	CWE-667 Improper Locking	CVE-2002-1914	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

313367	5.5	MEDIUM Local	openbsd netbsd freebsd	openbsd netbsd freebsd	tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.	CWE-667 Improper Locking	CVE-2002-1915	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

313368	7.8	HIGH Local	microsoft	windows_2000	Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.	CWE-667 Improper Locking	CVE-2002-0051	2024-02-9 04:24	2002-04-4	Show	GitHub Exploit DB Packet Storm

313369	5.5	MEDIUM Local	concurrent_versions_software_project	concurrent_versions_software	Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use…	CWE-667 Improper Locking	CVE-2000-0338	2024-02-9 04:23	2000-04-23	Show	GitHub Exploit DB Packet Storm

313370	5.5	MEDIUM Local	qualcomm	qpopper	qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.	CWE-667 Improper Locking	CVE-2000-1198	2024-02-9 04:22	2001-08-31	Show	GitHub Exploit DB Packet Storm