Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
193341	6.1	警告 Network	Cloud Foundry Foundation Pivotal Software, Inc.	-	Cloud Foundry Runtime cf-release などの製品におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2015-3190	2017-06-26 19:01	2015-04-10	Show	GitHub Exploit DB Packet Storm

193342	3.7	低 Network	Cloud Foundry Foundation Pivotal Software, Inc.	-	Cloud Foundry Runtime cf-release などの製品におけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2015-3189	2017-06-26 19:00	2015-04-10	Show	GitHub Exploit DB Packet Storm

193343	6.5	警告 Network	Cloud Foundry Foundation Pivotal Software, Inc.	-	Pivotal Elastic Runtime および cf-release の Cloud Controller におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2015-1834	2017-06-26 19:00	2015-04-10	Show	GitHub Exploit DB Packet Storm

193344	8.8	重要 Network	PivotX	-	PivotX における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2017-8402	2017-06-26 18:15	2017-05-29	Show	GitHub Exploit DB Packet Storm

193345	6.5	警告 Network	Cloud Foundry Foundation Pivotal Software, Inc.	-	Pivotal Elastic Runtime および cf-release の Loggregator Traffic Controller エンドポイントにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2016-2165	2017-06-26 18:12	2016-03-23	Show	GitHub Exploit DB Packet Storm

193346	6.1	警告 Network	Cloud Foundry Foundation Pivotal Software, Inc.	-	Cloud Foundry などの製品の UAA OAuth 承認ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0781	2017-06-26 18:12	2016-03-23	Show	GitHub Exploit DB Packet Storm

193347	7.5	重要 Network	Cloud Foundry Foundation Pivotal Software, Inc.	-	Pivotal Elastic Runtime および cf-release におけるリソース管理に関する脆弱性	CWE-399 リソース管理の問題	CVE-2016-0780	2017-06-26 18:12	2016-03-23	Show	GitHub Exploit DB Packet Storm

193348	8.8	重要 Network	Cloud Foundry Foundation Pivotal Software, Inc.	-	Cloud Foundry Runtime cf-release などの製品におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-3191	2017-06-26 18:12	2015-04-10	Show	GitHub Exploit DB Packet Storm

193349	7	重要 Local	Google	-	Android の TrustZone における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2016-10297	2017-06-26 17:35	2017-05-1	Show	GitHub Exploit DB Packet Storm

193350	7.8	重要 Local	Google	-	Android の TrustZone における二重解放に関する脆弱性	CWE-415 二重解放	CVE-2015-9007	2017-06-26 17:35	2017-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352241	-	sws	sws_simple_web_server	Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request.	NVD-CWE-Other	CVE-2002-1864	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352242	-	d-link linksys	di-804 dl-704 befw11s4 wap11	Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.4…	NVD-CWE-Other	CVE-2002-1865	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352243	-	sws	sws_simple_web_server	Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via mu…	NVD-CWE-Other	CVE-2002-1866	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352244	-	daniel_stenberg	dispair	Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.	NVD-CWE-Other	CVE-2002-1868	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352245	-	sws	sws_simple_web_server	Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitializ…	NVD-CWE-Other	CVE-2002-1870	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352246	-	astrocam	astrocam	astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request. NOTE: earlier disclosures stated that the affected v…	CWE-20 Improper Input Validation	CVE-2002-1874	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352247	-	mcafee	entercept_agent	Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the en…	NVD-CWE-Other	CVE-2002-1875	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352248	-	w-agora	w-agora	PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter.	NVD-CWE-Other	CVE-2002-1878	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352249	-	lokwa	lokwabb	SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php.	NVD-CWE-Other	CVE-2002-1879	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

352250	-	lokwa	lokwabb	LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.	NVD-CWE-Other	CVE-2002-1880	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm