Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191491 9.8 緊急
Network 		GNU Project - GNU C Library の nscd におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2014-9984 2017-07-5 15:55 2014-03-12 Show GitHub Exploit DB Packet Storm
191492 5.4 警告
Network 		BigTree CMS - BigTree の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-9548 2017-07-5 15:55 2017-06-11 Show GitHub Exploit DB Packet Storm
191493 5.4 警告
Network 		BigTree CMS - BigTree の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-9547 2017-07-5 15:55 2017-06-11 Show GitHub Exploit DB Packet Storm
191494 5.7 警告
Network 		BigTree CMS - BigTree の admin.php におけるサービス運用妨害 (DoS) の脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-9546 2017-07-5 15:55 2017-06-11 Show GitHub Exploit DB Packet Storm
191495 9.8 緊急
Network 		MavEtJu.org - dnstracer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-9430 2017-07-5 15:03 2017-06-5 Show GitHub Exploit DB Packet Storm
191496 3.3 低
Local 		Lenovo - Lenovo Power Management ドライバにおけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2017-3741 2017-07-5 14:56 2017-06-4 Show GitHub Exploit DB Packet Storm
191497 5.5 警告
Local 		Lenovo - Lenovo Active Protection System における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-3740 2017-07-5 14:55 2017-06-4 Show GitHub Exploit DB Packet Storm
191498 6.5 警告
Network 		Zulip - Zulip Server の invite_by_admins_only 設定の実装における別のユーザを Zulip グループに加入するよう招待される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-0896 2017-07-5 14:28 2017-05-18 Show GitHub Exploit DB Packet Storm
191499 4.3 警告
Network 		Elasticsearch - Elastic X-Pack Security における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-8441 2017-07-5 11:57 2017-06-1 Show GitHub Exploit DB Packet Storm
191500 6.1 警告
Network 		Elasticsearch - Kibana の Discover ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-8440 2017-07-5 11:57 2017-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350681 - bzip bzip2 bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could … NVD-CWE-Other
CVE-2002-0761 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350682 - hp virtualvault Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the… NVD-CWE-Other
CVE-2002-0763 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350683 - phorum phorum Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a … NVD-CWE-Other
CVE-2002-0764 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350684 - richard_gooch simpleinit simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with roo… NVD-CWE-Other
CVE-2002-0767 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350685 - luke_mewburn
suse 		lukemftp
suse_linux 		Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command. NVD-CWE-Other
CVE-2002-0768 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350686 - cisco ata-186 The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the att… NVD-CWE-Other
CVE-2002-0769 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350687 - id_software quake_2i_server Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand … NVD-CWE-Other
CVE-2002-0770 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350688 - hosting_controller hosting_controller Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter. NVD-CWE-Other
CVE-2002-0772 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350689 - hosting_controller hosting_controller imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) … NVD-CWE-Other
CVE-2002-0773 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350690 - hosting_controller hosting_controller Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed. NVD-CWE-Other
CVE-2002-0774 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm