Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
196511	7.5	重要 Network	The Netty project	-	Netty の handler/ssl/OpenSslEngine.java におけるサービス運用妨害 (DoS) の脆弱性	CWE-835 無限ループ	CVE-2016-4970	2017-05-18 14:52	2016-06-7	Show	GitHub Exploit DB Packet Storm

196512	9.8	緊急 Network	Debian Inspire IRCd	-	Debian inspircd パッケージにおけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2015-6674	2017-05-18 14:45	2015-03-20	Show	GitHub Exploit DB Packet Storm

196513	10	緊急 Network	SolarWinds	-	SolarWinds Log & Event Manager におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2017-7722	2017-05-18 14:41	2017-03-17	Show	GitHub Exploit DB Packet Storm

196514	7.8	重要 Local	Linux	-	Linux Kernel の mm サブシステムにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-7889	2017-05-18 14:37	2017-04-12	Show	GitHub Exploit DB Packet Storm

196515	7.5	重要 Network	Linux	-	Linux Kernel の nfsd サブシステムの NFSv2/NFSv3 サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2017-7645	2017-05-18 14:37	2017-04-25	Show	GitHub Exploit DB Packet Storm

196516	9.8	緊急 Network	RTMPDump project	-	RTMPDump の amf.c の AMF3CD_AddProp 関数における任意のコードを実行される脆弱性	CWE-123 任意の場所に任意の値を書き込み可能な状態	CVE-2015-8271	2017-05-18 14:36	2015-11-19	Show	GitHub Exploit DB Packet Storm

196517	7.5	重要 Network	RTMPDump project	-	RTMPDump の amf.c の AMF3ReadString 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2015-8270	2017-05-18 14:36	2015-11-19	Show	GitHub Exploit DB Packet Storm

196518	5.5	警告 Local	radare	-	radare2 の libr/bin/format/mach0/mach0.c の get_relocs_64 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-416 解放済みメモリの使用	CVE-2017-7946	2017-05-18 14:27	2017-04-18	Show	GitHub Exploit DB Packet Storm

196519	7.7	重要 Network	openSUSE project Canonical Debian Fabrice Bellard SUSE Fedora Project	-	QEMU の net/vmxnet3.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-8567	2017-05-18 14:00	2015-12-15	Show	GitHub Exploit DB Packet Storm

196520	7.5	重要 Network	Apache Software Foundation	-	Apache CXF におけるセッションの固定化の脆弱性	CWE-384 セッションの固定化	CVE-2017-5656	2017-05-18 11:31	2017-01-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356361	-	webmin	webmin	The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_for…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2360	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356362	-	yahoo	messenger	The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2361	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356363	-	sourceforge	mymarket	Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter.	CWE-79 Cross-site Scripting	CVE-2002-2362	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356364	-	hp	hp-ux	VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2363	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356365	-	sourceforge	php_ticket	Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket.	CWE-79 Cross-site Scripting	CVE-2002-2364	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356366	-	springer_verlag_berlin_heidelberg	simple_wais	Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "\|" (pipe) character.	CWE-20 Improper Input Validation	CVE-2002-2365	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356367	-	cerulean_studios	trillian	Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors fil…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2366	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356368	-	socks5	socks5	Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname.	CWE-189 CWE-119 Numeric Errors Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2367	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356369	-	nec	socks_5	Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function i…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2368	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

356370	-	perception	liteserve	Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.	CWE-200 Information Exposure	CVE-2002-2369	2008-09-6 05:33	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed