Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200591 6.8 警告 Debian
Canonical
Apache Software Foundation
- Apache Tomcat における Web セッションをハイジャックされる脆弱性 CWE-Other
その他
CVE-2015-5346 2016-12-5 17:01 2015-12-10 Show GitHub Exploit DB Packet Storm
200592 5 警告 ヒューレット・パッカード
Debian
Canonical
Apache Software Foundation
- Apache Tomcat の Mapper コンポーネントにおけるディレクトリの存在を特定される脆弱性 CWE-22
パス・トラバーサル
CVE-2015-5345 2016-12-5 17:01 2015-12-6 Show GitHub Exploit DB Packet Storm
200593 4 警告 ヒューレット・パッカード
Debian
Canonical
Apache Software Foundation
- Apache Tomcat の RequestUtil.java におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-5174 2016-12-5 17:01 2015-08-17 Show GitHub Exploit DB Packet Storm
200594 5 警告 ヒューレット・パッカード
Debian
Apache Software Foundation
- Apache Tomcat の Expression Language の実装における SecurityManager 保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2014-7810 2016-12-5 17:01 2014-12-9 Show GitHub Exploit DB Packet Storm
200595 7.5 重要
Network
OpenSSL Project
SUSE
- OpenSSL の crypto/x509/x509_vfy.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-7052 2016-12-5 16:57 2016-09-26 Show GitHub Exploit DB Packet Storm
200596 9.8 緊急
Network
OpenSSL Project - OpenSSL の statem/statem.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6309 2016-12-5 16:57 2016-09-26 Show GitHub Exploit DB Packet Storm
200597 5.9 警告
Network
Apache Software Foundation - Apache HTTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1546 2016-12-5 16:57 2016-04-11 Show GitHub Exploit DB Packet Storm
200598 6.5 警告 Debian
Canonical
Apache Software Foundation
- Apache Tomcat の org/apache/naming/factory/ResourceLinkFactory.java の setGlobalContext メソッドにおける SecurityManager の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0763 2016-12-5 16:57 2016-01-5 Show GitHub Exploit DB Packet Storm
200599 7.8 重要
Local
BMC Software - BMC Patrol における root 権限へ昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-9638 2016-12-5 14:09 2016-12-2 Show GitHub Exploit DB Packet Storm
200600 7.5 重要
Network
b2evolution - b2evolution の "パスワード喪失" 機能における任意のユーザパスワードをリセットされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-9479 2016-12-5 12:10 2016-10-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352201 - ibm aix The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. NVD-CWE-Other
CVE-2000-0249 2008-09-11 04:03 2000-04-26 Show GitHub Exploit DB Packet Storm
352202 - qnx qnx The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. NVD-CWE-Other
CVE-2000-0250 2008-09-11 04:03 2000-04-14 Show GitHub Exploit DB Packet Storm
352203 - hp hp-ux
vvos
HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. NVD-CWE-Other
CVE-2000-0251 2008-09-11 04:03 2000-04-6 Show GitHub Exploit DB Packet Storm
352204 - nbase-xyplex edgeblaster The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program. NVD-CWE-Other
CVE-2000-0255 2008-09-11 04:03 2000-04-5 Show GitHub Exploit DB Packet Storm
352205 - redhat linux The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. NVD-CWE-Other
CVE-2000-0263 2008-09-11 04:03 2000-04-16 Show GitHub Exploit DB Packet Storm
352206 - cisco catos Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. NVD-CWE-Other
CVE-2000-0267 2008-09-11 04:03 2000-04-20 Show GitHub Exploit DB Packet Storm
352207 - cisco ios
accesspath
as5200
as5300
as5800
system_controller_3640
voice_gateway_as5800
3660_router
7100_router
7200_router
7500_router
ubr7200
Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot. NVD-CWE-Other
CVE-2000-0268 2008-09-11 04:03 2000-04-20 Show GitHub Exploit DB Packet Storm
352208 - symantec pcanywhere PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt. NVD-CWE-Other
CVE-2000-0273 2008-09-11 04:03 2000-04-9 Show GitHub Exploit DB Packet Storm
352209 - cryptocard cryptoadmin CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. NVD-CWE-Other
CVE-2000-0275 2008-09-11 04:03 2000-04-10 Show GitHub Exploit DB Packet Storm
352210 - saleslogix corporation_eviewer The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user. NVD-CWE-Other
CVE-2000-0278 2008-09-11 04:03 2000-08-3 Show GitHub Exploit DB Packet Storm