Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
193681 3.5
Network
Nextcloud - Nextcloud におけるセッションの固定化の脆弱性 CWE-384
セッションの固定化
CVE-2017-0892 2017-05-22 18:39 2017-05-8 Show GitHub Exploit DB Packet Storm
193682 8.8 重要
Network
IBM - IBM WebSphere Application Server におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-1194 2017-05-22 18:37 2017-04-26 Show GitHub Exploit DB Packet Storm
193683 5.3 警告
Local
IBM - IBM WebSphere Commerce におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-1170 2017-05-22 18:37 2017-04-21 Show GitHub Exploit DB Packet Storm
193684 8.1 重要
Network
IBM - IBM UrbanCode Deploy における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2017-1149 2017-05-22 18:37 2017-04-11 Show GitHub Exploit DB Packet Storm
193685 8.1 重要
Network
IBM - IBM WebSphere Application Server におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-1137 2017-05-22 18:37 2017-05-3 Show GitHub Exploit DB Packet Storm
193686 8.1 重要
Network
IBM - IBM Team Concert におけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2017-1103 2017-05-22 18:37 2017-05-4 Show GitHub Exploit DB Packet Storm
193687 8.4 重要
Local
IBM - IBM Maximo Asset Management におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-9976 2017-05-22 18:35 2016-12-16 Show GitHub Exploit DB Packet Storm
193688 5.9 警告
Network
IBM - IBM BigFix Inventory における証明書・パスワードの管理に関する脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-8962 2017-05-22 18:35 2016-12-16 Show GitHub Exploit DB Packet Storm
193689 5.6 警告
Network
IBM - IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8924 2017-05-22 18:35 2016-10-25 Show GitHub Exploit DB Packet Storm
193690 4.8 警告
Network
IBM - IBM Team Concert におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6037 2017-05-22 18:35 2016-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346881 - mutt mutt Mutt mail client allows a remote attacker to execute commands via shell metacharacters. NVD-CWE-Other
CVE-1999-0941 2016-10-18 10:59 1998-07-28 Show GitHub Exploit DB Packet Storm
346882 - yamaha midiplug Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag. NVD-CWE-Other
CVE-1999-0946 2016-10-18 10:59 1999-11-2 Show GitHub Exploit DB Packet Storm
346883 - an an-httpd AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters. NVD-CWE-Other
CVE-1999-0947 2016-10-18 10:59 1999-11-2 Show GitHub Exploit DB Packet Storm
346884 - positive_software cp\+ Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug i… NVD-CWE-Other
CVE-2005-4261 2016-10-15 10:59 2005-12-15 Show GitHub Exploit DB Packet Storm
346885 - softwin bitdefender Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format str… CWE-134
Use of Externally-Controlled Format String
CVE-2005-3154 2016-09-30 23:33 2005-10-6 Show GitHub Exploit DB Packet Storm
346886 - cisco ios Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data. CWE-200
Information Exposure
CVE-2000-0368 2016-09-21 22:06 2001-03-12 Show GitHub Exploit DB Packet Storm
346887 - ibm aix Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter. NVD-CWE-Other
CVE-2001-1095 2016-09-17 10:59 2001-10-9 Show GitHub Exploit DB Packet Storm
346888 - phpbb_group phpbb db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2002-0473 2016-09-17 10:59 2002-08-12 Show GitHub Exploit DB Packet Storm
346889 - pablo_software_solutions pablo_ftp_server Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. NVD-CWE-Other
CVE-2002-1054 2016-09-17 10:59 2002-10-4 Show GitHub Exploit DB Packet Storm
346890 - sun java Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and av… NVD-CWE-noinfo
CVE-2010-0887 2016-08-23 11:01 2010-04-21 Show GitHub Exploit DB Packet Storm