Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192841	4.9	警告 Network	Sitecore	-	Sitecore における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-11440	2017-08-8 12:30	2017-05-5	Show	GitHub Exploit DB Packet Storm

192842	5.4	警告 Network	Sitecore	-	Sitecore における反射型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-11439	2017-08-8 12:30	2017-05-5	Show	GitHub Exploit DB Packet Storm

192843	7.8	重要 Local	Alpine Linux Development Team	-	apk におけるヒープオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-9671	2017-08-8 12:09	2017-06-25	Show	GitHub Exploit DB Packet Storm

192844	7.8	重要 Local	Alpine Linux Development Team	-	apk におけるヒープオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-9669	2017-08-8 12:09	2017-06-25	Show	GitHub Exploit DB Packet Storm

192845	6.5	警告 Network	Exiv2 project	-	Exiv2 の XmpParser::terminate() 関数におけるセグメンテーション違反を引き起こされる脆弱性	CWE-20 不適切な入力確認	CVE-2017-11340	2017-08-8 11:57	2017-07-14	Show	GitHub Exploit DB Packet Storm

192846	6.5	警告 Network	Exiv2 project	-	Exiv2 の image.cpp の Image::printIFDStructure 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-11339	2017-08-8 11:57	2017-07-14	Show	GitHub Exploit DB Packet Storm

192847	6.5	警告 Network	Exiv2 project	-	Exiv2 の image.cpp の Exiv2::Image::printIFDStructure 関数における無限ループを引き起こされる脆弱性	CWE-20 不適切な入力確認	CVE-2017-11338	2017-08-8 11:57	2017-07-13	Show	GitHub Exploit DB Packet Storm

192848	6.5	警告 Network	Exiv2 project	-	Exiv2 の actions.cpp の Action::TaskFactory::cleanup 関数における不正な解放を引き起こされる脆弱性	CWE-416 解放済みメモリの使用	CVE-2017-11337	2017-08-8 11:57	2017-07-13	Show	GitHub Exploit DB Packet Storm

192849	6.5	警告 Network	Exiv2 project	-	Exiv2 の image.cpp の Image::printIFDStructure 関数におけるヒープベースのバッファオーバーリードの脆弱性	CWE-119 バッファエラー	CVE-2017-11336	2017-08-8 11:57	2017-07-13	Show	GitHub Exploit DB Packet Storm

192850	7.3	重要 Network	富士電機	-	Fuji Electric V-Server におけるメモリを破損される脆弱性	CWE-119 バッファエラー	CVE-2017-9639	2017-08-8 11:53	2017-07-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355291	-	cisco	catos	Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switc…	NVD-CWE-Other	CVE-2002-2316	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355292	-	symantec	velociraptor	Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.	NVD-CWE-noinfo CWE-200 Information Exposure	CVE-2002-2317	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355293	-	blueface	falcon_web_server	Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 erro…	CWE-79 Cross-site Scripting	CVE-2002-2318	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355294	-	mysimplenews	mysimplenews	Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted…	CWE-94 Code Injection	CVE-2002-2319	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355295	-	mysimplenews	mysimplenews	MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2320	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355296	-	phplinkat	phplinkat	Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter.	CWE-79 Cross-site Scripting	CVE-2002-2321	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355297	-	ultimate_php_board	ultimate_php_board	Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords.	CWE-20 Improper Input Validation	CVE-2002-2322	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355298	-	microsoft	windows_xp	The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list (ACL) p…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2324	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355299	-	university_of_washington	pine	The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIM…	CWE-20 Improper Input Validation	CVE-2002-2325	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

355300	-	apple	mac_os_x	The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote …	CWE-310 Cryptographic Issues	CVE-2002-2326	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm