Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196271 9.1 緊急
Network 		GNU Project - GNU Binutils の readelf におけるヒープベースのバッファオーバーリードの脆弱性 CWE-119
バッファエラー 		CVE-2017-6969 2017-04-14 13:56 2017-02-20 Show GitHub Exploit DB Packet Storm
196272 7.3 重要
Network 		xrdp - xrdp における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-6967 2017-04-14 13:56 2017-03-15 Show GitHub Exploit DB Packet Storm
196273 4.8 警告
Adjacent 		アップル - Android 用 Apple Music アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2017-2387 2017-04-14 12:40 2017-04-4 Show GitHub Exploit DB Packet Storm
196274 5.9 警告
Network 		GNU Project - GNU C Library の fnmatch 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2015-8984 2017-04-14 09:54 2015-02-26 Show GitHub Exploit DB Packet Storm
196275 8.1 重要
Network 		GNU Project - GNU C Library の libio/wstrops.c の _IO_wstr_overflow 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2015-8983 2017-04-14 09:54 2015-02-22 Show GitHub Exploit DB Packet Storm
196276 9.8 緊急
Network 		Chef Software, Inc. - Chef Manage のユーザアカウント作成機能における任意のコードを実行される脆弱性 CWE-254
セキュリティ機能 		CVE-2017-7174 2017-04-13 17:49 2017-03-18 Show GitHub Exploit DB Packet Storm
196277 9.8 緊急
Network 		ERLANG - Erlang/OTP のコンパイルされた正規表現の生成におけるヒープオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-10253 2017-04-13 17:45 2016-06-19 Show GitHub Exploit DB Packet Storm
196278 6.5 警告
Network 		アップル - Apple iOS および Safari の Safari コンポーネントにおけるユーザインターフェースで FaceTime プロンプトを偽装される脆弱性 CWE-254
セキュリティ機能 		CVE-2017-2453 2017-04-13 17:33 2017-03-27 Show GitHub Exploit DB Packet Storm
196279 6.5 警告
Network 		アップル - Apple iOS および Safari などで使用される WebKit JavaScript Bindings コンポーネントにおける同一生成元ポリシーを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2442 2017-04-13 17:33 2017-03-27 Show GitHub Exploit DB Packet Storm
196280 8.8 重要
Network 		アップル - Apple iOS および Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2017-2378 2017-04-13 17:33 2017-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352491 - rox filer ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files. NVD-CWE-Other
CVE-2002-1956 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352492 - pen pen Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages. NVD-CWE-Other
CVE-2002-1957 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352493 - kmmail kmmail Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in "safe" H… CWE-79
Cross-site Scripting 		CVE-2002-1958 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352494 - nagios nagios Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output. NVD-CWE-Other
CVE-2002-1959 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352495 - cybozu share360 Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML link. NVD-CWE-Other
CVE-2002-1960 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352496 - finjan_software surfingate Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a fully qualified domain name (FQDN) that ends in a "." (dot). NVD-CWE-Other
CVE-2002-1961 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352497 - finjan_software surfingate Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname. NVD-CWE-Other
CVE-2002-1962 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352498 - linux linux_kernel Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries. NVD-CWE-Other
CVE-2002-1963 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352499 - wesmo phpeventcalendar Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary commands via unknown attack vectors. NVD-CWE-Other
CVE-2002-1964 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm
352500 - imatix xitami Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated v… NVD-CWE-Other
CVE-2002-1965 2008-09-6 05:31 2002-12-31 Show GitHub Exploit DB Packet Storm