Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201831	7.8	重要 Local	Lenovo	-	Windows を稼動する複数の Lenovo システムで使用される Lenovo Transition における権限を昇格される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8227	2017-02-10 10:09	2016-12-29	Show	GitHub Exploit DB Packet Storm

201832	4.9	警告 Network	Lenovo	-	複数の Lenovo System 製品の BIOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-19 データ処理	CVE-2016-8226	2017-02-10 10:09	2016-12-15	Show	GitHub Exploit DB Packet Storm

201833	7.8	重要 Local	Lenovo	-	Lenovo Edge および Lenovo Slim USB キーボードドライバーにおける昇格された権限でコードを実行される脆弱性	CWE-428 引用されない検索パスまたは要素	CVE-2016-8225	2017-02-10 10:09	2016-12-15	Show	GitHub Exploit DB Packet Storm

201834	9.8	緊急 Network	Aerospike, Inc.	-	Aerospike Database Server のクエリ機能の as_sindex__simatch_list_by_set_binid 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9054	2017-02-9 18:44	2016-10-26	Show	GitHub Exploit DB Packet Storm

201835	9.8	緊急 Network	Aerospike, Inc.	-	Aerospike Database Server のクエリ機能の as_sindex__simatch_by_iname 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9052	2017-02-9 18:44	2016-10-26	Show	GitHub Exploit DB Packet Storm

201836	8.2	重要 Network	Aerospike, Inc.	-	Aerospike Database Server のクライアントメッセージの構文解析機能における境界外読み取りの脆弱性	CWE-125 境界外読み取り	CVE-2016-9050	2017-02-9 18:44	2016-10-26	Show	GitHub Exploit DB Packet Storm

201837	6.1	警告 Network	eClinicalWorks	-	eClinicalWorks Patient Portal の raceMasterList.jsp における反射型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5599	2017-02-9 18:23	2017-01-27	Show	GitHub Exploit DB Packet Storm

201838	7.5	重要 Network	eClinicalWorks	-	eClinicalWorks healow＠work の EmployeePortalServlet におけるブラインド SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-5598	2017-02-9 18:22	2017-01-27	Show	GitHub Exploit DB Packet Storm

201839	6.1	警告 Network	Opera Software ASA	-	Android 用 Opera における URL を偽装される脆弱性	CWE-601 オープンリダイレクト	CVE-2016-6908	2017-02-9 18:21	2016-08-30	Show	GitHub Exploit DB Packet Storm

201840	3.3	低 Local	シトリックス・システムズ Xen プロジェクト	-	x86 システム上で稼動する Xen の CMPXCHG8B エミュレーションにおけるホストスタックメモリから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-9932	2017-02-9 17:46	2016-12-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
344241	-	microsoft	office_web_components project	The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands vi…	NVD-CWE-Other	CVE-2002-0727	2018-10-13 06:31	2002-09-24	Show	GitHub Exploit DB Packet Storm

344242	-	microsoft	office_web_components project	The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redire…	NVD-CWE-Other	CVE-2002-0860	2018-10-13 06:31	2002-09-24	Show	GitHub Exploit DB Packet Storm

344243	-	microsoft	office_web_components project	Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell ob…	NVD-CWE-Other	CVE-2002-0861	2018-10-13 06:31	2002-09-24	Show	GitHub Exploit DB Packet Storm

344244	-	microsoft	virtual_machine	A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remot…	NVD-CWE-Other	CVE-2002-0865	2018-10-13 06:31	2002-10-11	Show	GitHub Exploit DB Packet Storm

344245	-	microsoft	virtual_machine	Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet tha…	NVD-CWE-Other	CVE-2002-0866	2018-10-13 06:31	2002-10-11	Show	GitHub Exploit DB Packet Storm

344246	-	microsoft	virtual_machine	Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Hand…	NVD-CWE-Other	CVE-2002-0867	2018-10-13 06:31	2002-10-11	Show	GitHub Exploit DB Packet Storm

344247	-	microsoft	outlook word	Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which …	NVD-CWE-Other	CVE-2002-1056	2018-10-13 06:31	2002-05-16	Show	GitHub Exploit DB Packet Storm

344248	-	microsoft	data_engine sql_server	Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port …	NVD-CWE-Other	CVE-2002-1123	2018-10-13 06:31	2002-09-24	Show	GitHub Exploit DB Packet Storm

344249	-	microsoft	data_engine sql_server	Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 20…	NVD-CWE-Other	CVE-2002-1137	2018-10-13 06:31	2002-10-11	Show	GitHub Exploit DB Packet Storm

344250	-	microsoft	data_engine sql_server	Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the …	NVD-CWE-Other	CVE-2002-1138	2018-10-13 06:31	2002-10-11	Show	GitHub Exploit DB Packet Storm