Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201001 6.1 警告
Network 		Zimbra - Zimbra Collaboration におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5721 2016-08-30 11:34 2016-08-29 Show GitHub Exploit DB Packet Storm
201002 8.8 重要
Network 		Jenkins プロジェクト
レッドハット		 - Jenkins の不特定の API エンドポイントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0792 2016-08-29 18:18 2016-02-24 Show GitHub Exploit DB Packet Storm
201003 9.8 緊急
Network 		Jenkins プロジェクト
レッドハット		 - Jenkins における CSRF 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-0791 2016-08-29 18:17 2016-02-24 Show GitHub Exploit DB Packet Storm
201004 5.3 警告
Network 		Jenkins プロジェクト
レッドハット		 - Jenkins における API トークンを特定される脆弱性 CWE-200
CWE-Other
CVE-2016-0790 2016-08-29 18:16 2016-02-24 Show GitHub Exploit DB Packet Storm
201005 6.1 警告
Network 		Jenkins プロジェクト
レッドハット		 - Jenkins の CLI コマンドのドキュメンテーションにおける CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0789 2016-08-29 18:16 2016-02-24 Show GitHub Exploit DB Packet Storm
201006 9.8 緊急
Network 		Jenkins プロジェクト
レッドハット		 - Jenkins のリモーティングモジュールにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0788 2016-08-29 18:15 2016-02-24 Show GitHub Exploit DB Packet Storm
201007 6.5 警告
Network 		レッドハット
Debian
openSUSE project
SUSE
Google		 - Google Chrome の拡張バインディングの extensions/renderer/resources/binding.js における任意のモジュールをロードされる脆弱性 CWE-200
情報漏えい 		CVE-2016-1698 2016-08-29 18:15 2016-06-1 Show GitHub Exploit DB Packet Storm
201008 8.8 重要
Network 		openSUSE project
Canonical
Debian
Google
SUSE
レッドハット		 - Google Chrome で使用される Blink の WebKit/Source/core/loader/FrameLoader.cpp における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2016-1697 2016-08-29 18:15 2016-06-1 Show GitHub Exploit DB Packet Storm
201009 8.8 重要
Network 		レッドハット
Debian
openSUSE project
SUSE
Google		 - Google Chrome の拡張サブシステムにおける同一生成元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2016-1696 2016-08-29 18:15 2016-06-1 Show GitHub Exploit DB Packet Storm
201010 9.8 緊急
Network 		Google
openSUSE project
レッドハット		 - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2016-1666 2016-08-29 17:38 2016-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346841 - sgi quake_1_server Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another … NVD-CWE-Other
CVE-1999-1066 2016-10-18 11:00 1999-12-22 Show GitHub Exploit DB Packet Storm
346842 - sgi irix SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activi… NVD-CWE-Other
CVE-1999-1067 2016-10-18 11:00 1997-05-7 Show GitHub Exploit DB Packet Storm
346843 - oracle http_server Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request. NVD-CWE-Other
CVE-1999-1068 2016-10-18 11:00 1997-07-23 Show GitHub Exploit DB Packet Storm
346844 - excite ews Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted passw… NVD-CWE-Other
CVE-1999-1072 2016-10-18 11:00 1998-11-30 Show GitHub Exploit DB Packet Storm
346845 - excite ews Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a br… NVD-CWE-Other
CVE-1999-1073 2016-10-18 11:00 1998-11-30 Show GitHub Exploit DB Packet Storm
346846 - ibm aix AIX infod allows local users to gain root access through an X display. NVD-CWE-Other
CVE-1999-0118 2016-10-18 10:59 1998-11-1 Show GitHub Exploit DB Packet Storm
346847 - dan_bernstein qmail Denial of service in Qmail through long SMTP commands. NVD-CWE-Other
CVE-1999-0250 2016-10-18 10:59 1997-07-1 Show GitHub Exploit DB Packet Storm
346848 - - - The Java Web Server would allow remote users to obtain the source code for CGI programs. NVD-CWE-Other
CVE-1999-0283 2016-10-18 10:59 1999-01-1 Show GitHub Exploit DB Packet Storm
346849 - - - Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified … NVD-CWE-Other
CVE-1999-0347 2016-10-18 10:59 1999-01-26 Show GitHub Exploit DB Packet Storm
346850 - microsoft site_server MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely. NVD-CWE-Other
CVE-1999-0360 2016-10-18 10:59 1999-01-30 Show GitHub Exploit DB Packet Storm