Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
199111 5.3 警告
Network
株式会社ロックオン - EC-CUBE におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1199 2016-05-31 17:38 2016-04-26 Show GitHub Exploit DB Packet Storm
199112 4.3 警告
Network
株式会社ロックオン - EC-CUBE におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1201 2016-05-31 17:37 2016-04-26 Show GitHub Exploit DB Packet Storm
199113 4.3 警告
Network
Google - Google Chrome の拡張サブシステムにおける同一生成元ポリシーを回避される脆弱性 CWE-200
CWE-Other
CVE-2016-1658 2016-05-31 17:30 2016-04-13 Show GitHub Exploit DB Packet Storm
199114 8.8 重要
Network
Google
Canonical
- Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1655 2016-05-31 17:29 2016-04-13 Show GitHub Exploit DB Packet Storm
199115 8.8 重要
Adjacent
Lemur Vehicle Monitors - BlueDriver LSB2 に認証なしで Bluetooth アクセスが可能な問題 CWE-Other
CWE-Other
CVE-2016-2354 2016-05-31 17:28 2016-04-7 Show GitHub Exploit DB Packet Storm
199116 9.8 緊急
Network
ヒューレット・パッカード・エンタープライズ - HPE P9000 CVAE ソフトウェアおよび XP7 CVAE における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-2003 2016-05-31 17:25 2016-04-21 Show GitHub Exploit DB Packet Storm
199117 5.1 警告
Local
マカフィー - Windows 上で稼動する複数の McAfee 製品の McAfee VirusScan Console における自己保護ルールを回避される脆弱性 CWE-Other
その他
CVE-2016-3984 2016-05-31 17:19 2016-02-25 Show GitHub Exploit DB Packet Storm
199118 4 警告 レッドハット
MySQL AB
openSUSE project
オラクル
- Oracle MySQL の MySQL Server における Server : DML に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4858 2016-05-31 17:06 2015-10-20 Show GitHub Exploit DB Packet Storm
199119 2.8 注意 レッドハット
MySQL AB
openSUSE project
オラクル
- Oracle MySQL の MySQL Server における Server : SP に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4836 2016-05-31 17:06 2015-10-20 Show GitHub Exploit DB Packet Storm
199120 4 警告 レッドハット
MySQL AB
openSUSE project
オラクル
- Oracle MySQL の MySQL Server における Server : Types に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4826 2016-05-31 17:06 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314881 - sun patchpro Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files." CWE-59
NVD-CWE-noinfo
CWE-362
Link Following
Race Condition
CVE-2002-2374 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314882 - stalker communigate_pro Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (d… CWE-22
Path Traversal
CVE-2002-2375 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314883 - leung e-guest Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homep… CWE-79
Cross-site Scripting
CVE-2002-2376 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314884 - sephiroth32 zap_book Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field. CWE-79
Cross-site Scripting
CVE-2002-2377 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314885 - nakata an_httpd Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting erro… CWE-79
Cross-site Scripting
CVE-2002-2378 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314886 - microsoft network_firmware NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic. CWE-200
Information Exposure
CVE-2002-2380 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314887 - ka-shu_wong gtetrinet Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2002-2381 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314888 - cvsup cvsup cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out. CWE-59
Link Following
CVE-2002-2382 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314889 - hotfoon_corporation hotfoon hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service. CWE-255
Credentials Management
CVE-2002-2384 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
314890 - hotfoon_corporation hotfoon Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2002-2385 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm