Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200261 7.8 重要
Local
IBM - IBM Security QRadar SIEM における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-2871 2016-12-2 16:12 2016-07-26 Show GitHub Exploit DB Packet Storm
200262 5.4 警告
Network
IBM - IBM Security QRadar SIEM の UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2869 2016-12-2 16:12 2016-07-26 Show GitHub Exploit DB Packet Storm
200263 8.1 重要
Network
DBD::mysql project - DBD::mysql における解放済みメモリ使用 (use-after-free) の脆弱性 CWE-Other
その他
CVE-2016-1251 2016-12-2 15:17 2016-11-19 Show GitHub Exploit DB Packet Storm
200264 8.6 重要
Network
s9y - Serendipity における SSRF 保護を回避される脆弱性 CWE-Other
その他
CVE-2016-9752 2016-12-2 15:06 2016-11-28 Show GitHub Exploit DB Packet Storm
200265 6.1 警告
Network
Piwigo - Piwigo の検索結果のフロントエンドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9751 2016-12-2 15:06 2016-11-29 Show GitHub Exploit DB Packet Storm
200266 8.8 重要
Network
IBM - IBM BigFix Remote Control におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-2963 2016-12-1 18:16 2016-10-7 Show GitHub Exploit DB Packet Storm
200267 3.7
Network
IBM - IBM BigFix Remote Control における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2952 2016-12-1 18:16 2016-10-7 Show GitHub Exploit DB Packet Storm
200268 3.7
Network
IBM - IBM BigFix Remote Control における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2016-2951 2016-12-1 18:16 2016-10-7 Show GitHub Exploit DB Packet Storm
200269 6.5 警告
Network
IBM - IBM BigFix Remote Control における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-2950 2016-12-1 18:16 2016-10-7 Show GitHub Exploit DB Packet Storm
200270 3.3
Local
IBM - IBM BigFix Remote Control における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2949 2016-12-1 18:16 2016-10-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346441 - bea weblogic_server This vulnerability is addressed in the following product releases: BEA Systems Weblogic Server 5.1 SP 7 BEA Systems WebLogic Express 5.1 SP 7 NVD-CWE-Other
CVE-2000-1238 2017-07-11 10:29 2000-12-31 Show GitHub Exploit DB Packet Storm
346442 - guido_frassetto sedum Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request. NVD-CWE-Other
CVE-2001-0199 2017-07-11 10:29 2001-05-3 Show GitHub Exploit DB Packet Storm
346443 - umut_gokbayrak postaci The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program. NVD-CWE-Other
CVE-2001-0201 2017-07-11 10:29 2001-03-26 Show GitHub Exploit DB Packet Storm
346444 - mnscu_pals webpals PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter. NVD-CWE-Other
CVE-2001-0216 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
346445 - mnscu_pals webpals Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter. NVD-CWE-Other
CVE-2001-0217 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
346446 - brightstation muscat_empower Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter. NVD-CWE-Other
CVE-2001-0224 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
346447 - holger_lamm pgp4pine pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cle… NVD-CWE-Other
CVE-2001-0273 2017-07-11 10:29 2001-05-3 Show GitHub Exploit DB Packet Storm
346448 - oracle internet_directory oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink … NVD-CWE-Other
CVE-2001-0300 2017-07-11 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
346449 - pgp openpgp The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message… NVD-CWE-Other
CVE-2001-0381 2017-07-11 10:29 2001-06-27 Show GitHub Exploit DB Packet Storm
346450 - oracle oracle8i Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3)… NVD-CWE-Other
CVE-2001-0499 2017-07-11 10:29 2001-07-21 Show GitHub Exploit DB Packet Storm