Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201061 7.5 重要
Network 		Exponent CMS project - Exponent CMS の "/expPaginator.php" における SQL インジェクションの脆弱性 CWE-200
CWE-89
CVE-2016-9134 2016-11-7 18:10 2016-10-25 Show GitHub Exploit DB Packet Storm
201062 9.8 緊急
Network 		Exponent CMS project - Exponent CMS の Pixidou Image Editor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-7453 2016-11-7 18:10 2016-09-15 Show GitHub Exploit DB Packet Storm
201063 7.5 重要
Network 		Exponent CMS project - Exponent CMS の Pixidou Image Editor におけるサイト上の任意のフォルダにファイルをアップロードされる脆弱性 CWE-Other
その他 		CVE-2016-7452 2016-11-7 18:10 2016-09-15 Show GitHub Exploit DB Packet Storm
201064 9.8 緊急
Network 		Exponent CMS project - Exponent CMS におけるスクリプトファイルをアップロードされる脆弱性 CWE-Other
その他 		CVE-2016-7095 2016-11-7 18:10 2016-08-28 Show GitHub Exploit DB Packet Storm
201065 6.5 警告
Network 		GitLab.org - GitLab の "import/export project" 機能における GitLab サービスアカウントにアクセス可能なすべてのファイルの内容を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9086 2016-11-7 15:49 2016-11-2 Show GitHub Exploit DB Packet Storm
201066 9.8 緊急
Network 		Square, Inc. - git-fastclone における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2015-8969 2016-11-7 14:55 2015-12-17 Show GitHub Exploit DB Packet Storm
201067 8.8 重要
Network 		Square, Inc. - git-fastclone における任意のシェルコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2015-8968 2016-11-7 14:55 2015-12-12 Show GitHub Exploit DB Packet Storm
201068 9.8 緊急
Network 		SAP - SAP ASE における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-7402 2016-11-7 14:34 2016-09-13 Show GitHub Exploit DB Packet Storm
201069 5.4 警告
Network 		IBM - IBM Financial Transaction Manager の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5920 2016-11-7 14:21 2016-08-19 Show GitHub Exploit DB Packet Storm
201070 5.7 警告
Network 		IBM - IBM Financial Transaction Manager の Payments Director におけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2016-3060 2016-11-7 14:21 2016-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352901 - log2mail log2mail Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message. NVD-CWE-Other
CVE-2002-1251 2008-09-6 05:30 2002-11-12 Show GitHub Exploit DB Packet Storm
352902 - abuse abuse Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute … NVD-CWE-Other
CVE-2002-1253 2008-09-6 05:30 2002-11-12 Show GitHub Exploit DB Packet Storm
352903 - apple mac_os_x Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem. NVD-CWE-Other
CVE-2002-1269 2008-09-6 05:30 2002-12-11 Show GitHub Exploit DB Packet Storm
352904 - squirrelmail squirrelmail An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving … NVD-CWE-Other
CVE-2002-1276 2008-09-6 05:30 2002-11-29 Show GitHub Exploit DB Packet Storm
352905 - windowmaker windowmaker Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and… NVD-CWE-Other
CVE-2002-1277 2008-09-6 05:30 2002-11-12 Show GitHub Exploit DB Packet Storm
352906 - hp hp-ux Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior." NVD-CWE-Other
CVE-2002-1406 2008-09-6 05:30 2003-04-11 Show GitHub Exploit DB Packet Storm
352907 - hp openview_emanate_snmp_agent
vvos 		Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) "'read-only' community access," and/or (2) an e… NVD-CWE-Other
CVE-2002-1408 2008-09-6 05:30 2003-04-11 Show GitHub Exploit DB Packet Storm
352908 - ben_chivers
easy_scripts_archive 		ben_chivers_guestbook
easy_guestbook 		Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access o… NVD-CWE-Other
CVE-2002-1410 2008-09-6 05:30 2003-04-11 Show GitHub Exploit DB Packet Storm
352909 - duma photo_gallery_system Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter. NVD-CWE-Other
CVE-2002-1411 2008-09-6 05:30 2003-04-11 Show GitHub Exploit DB Packet Storm
352910 - novell netware RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection. NVD-CWE-Other
CVE-2002-1413 2008-09-6 05:30 2003-04-11 Show GitHub Exploit DB Packet Storm