Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256881	5	警告	有限会社シースリー	-	WebCalenderC3 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0348	2010-01-12 15:01	2010-01-12	Show	GitHub Exploit DB Packet Storm

256882	4.3	警告	有限会社シースリー	-	WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0349	2010-01-12 15:00	2010-01-12	Show	GitHub Exploit DB Packet Storm

256883	10	危険	サイバートラスト株式会社 XEmacs	-	XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2688	2010-01-12 14:48	2009-08-5	Show	GitHub Exploit DB Packet Storm

256884	6.8	警告	IBM	-	IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2746	2010-01-12 14:48	2009-11-13	Show	GitHub Exploit DB Packet Storm

256885	5	警告	アップル	-	Apple Safari におけるローカル HTML ファイルを読まれる脆弱性	CWE-Other その他	CVE-2009-2842	2010-01-7 12:09	2009-11-11	Show	GitHub Exploit DB Packet Storm

256886	5.5	警告	シックス・アパート株式会社	-	Movable Type におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	-	2010-01-6 15:01	2010-01-6	Show	GitHub Exploit DB Packet Storm

256887	9.3	危険	マイクロソフト	-	Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3135	2010-01-6 14:44	2009-11-10	Show	GitHub Exploit DB Packet Storm

256888	5	警告	トレンドマイクロ日本電気 Apache Software Foundation 富士通サイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカードレッドハット	-	Apache Tomcat の Apache HTTP Server との組合せによるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-0450	2010-01-6 14:43	2007-03-16	Show	GitHub Exploit DB Packet Storm

256889	9.3	危険	マイクロソフト	-	Microsoft Office Excel および Open XML File Format Converter におけるオブジェクトを含むスプレッドシートの処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3133	2010-01-5 16:18	2009-11-10	Show	GitHub Exploit DB Packet Storm

256890	9.3	危険	マイクロソフト	-	Microsoft Office Excel および Open XML File Format Converter における BIFF レコードの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3130	2010-01-5 16:18	2009-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307101	5.5	MEDIUM Local	mutt debian	mutt debian_linux	Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2005-2351	2024-11-21 08:59	2019-11-2	Show	GitHub Exploit DB Packet Storm

307102	6.1	MEDIUM Network	websieve_project	websieve	Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface.	CWE-79 Cross-site Scripting	CVE-2005-2350	2024-11-21 08:59	2019-11-2	Show	GitHub Exploit DB Packet Storm

307103	7.5	HIGH Network	zoo_project	zoo	Zoo 2.10 has Directory traversal	CWE-22 Path Traversal	CVE-2005-2349	2024-11-21 08:59	2019-10-28	Show	GitHub Exploit DB Packet Storm

307104	9.8	CRITICAL Network	wp-plugins	secure_files	A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The ma…	-	CVE-2005-10002	2024-11-21 08:56	2023-10-30	Show	GitHub Exploit DB Packet Storm

307105	6.1	MEDIUM Network	broadcom	symantec_siteminder	A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The man…	CWE-601 Open Redirect	CVE-2005-10001	2024-11-21 08:56	2022-03-29	Show	GitHub Exploit DB Packet Storm

307106	9.8	CRITICAL Network	goscript_project	goscript	go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchive parameter.	NVD-CWE-Other	CVE-2004-2776	2024-11-21 08:54	2020-01-1	Show	GitHub Exploit DB Packet Storm

307107	7.5	HIGH Network	underbit	libid3tag	id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition…	CWE-399 Resource Management Errors	CVE-2004-2779	2024-11-21 08:54	2018-02-21	Show	GitHub Exploit DB Packet Storm

307108	7.1	HIGH Local	gentoo	portage	Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted comm…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2004-2778	2024-11-21 08:54	2017-06-28	Show	GitHub Exploit DB Packet Storm

307109	-		gehealthcare	centricity_image_vault_firmware	GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the ASACA DVD library, (3) an empty value f…	CWE-255 Credentials Management	CVE-2004-2777	2024-11-21 08:54	2015-08-4	Show	GitHub Exploit DB Packet Storm

307110	-		oracle redhat bsd_mailx_project heirloom	linux enterprise_linux bsd_mailx mailx	The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.	CWE-20 Improper Input Validation	CVE-2004-2771	2024-11-21 08:54	2014-12-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed