Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201941	9.8	緊急 Network	Exponent CMS project	-	Exponent CMS における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2016-2242	2017-02-6 17:43	2016-01-23	Show	GitHub Exploit DB Packet Storm

201942	9.8	緊急 Network	LHa for UNIX project	-	LHA の header.c における整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2016-1925	2017-02-6 17:41	2016-01-16	Show	GitHub Exploit DB Packet Storm

201943	7.5	重要 Network	OneLogin, Inc.	-	Ruby-saml における XML 署名ラッピング攻撃を実行される脆弱性	CWE-91 ブラインド XPath インジェクション	CVE-2016-5697	2017-02-6 17:41	2016-06-24	Show	GitHub Exploit DB Packet Storm

201944	8.8	重要 Network	Snort.org	-	Snort における任意のコードを実行される脆弱性	CWE-426 信頼性のない検索パス	CVE-2016-1417	2017-02-6 17:40	2016-09-29	Show	GitHub Exploit DB Packet Storm

201945	8.8	重要 Network	elfden	-	WordPress 用 eShop プラグインの eshop-orders.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-0769	2017-02-6 17:34	2016-02-2	Show	GitHub Exploit DB Packet Storm

201946	6.1	警告 Network	elfden	-	WordPress 用 eShop プラグインの eshop-orders.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0765	2017-02-6 17:33	2016-02-2	Show	GitHub Exploit DB Packet Storm

201947	7.8	重要 Local	Debian Terminology project	-	Terminology における任意のコマンドを実行される脆弱性	CWE-77 コマンドインジェクション	CVE-2015-8971	2017-02-6 17:32	2015-08-17	Show	GitHub Exploit DB Packet Storm

201948	7.8	重要 Local	マイクロソフト	-	Microsoft Skype における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-5720	2017-02-6 17:04	2016-09-27	Show	GitHub Exploit DB Packet Storm

201949	8.4	重要 Local	ownCloud	-	ownCloud Desktop における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2016-7102	2017-02-6 16:24	2016-08-17	Show	GitHub Exploit DB Packet Storm

201950	5.9	警告 Network	ownCloud	-	ownCloud サーバにおける任意の画像をダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-5876	2017-02-6 16:24	2016-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
344371	-	microsoft	outlook outlook_express	Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerabilit…	NVD-CWE-Other	CVE-2000-0567	2018-10-13 06:29	2000-07-18	Show	GitHub Exploit DB Packet Storm

344372	-	microsoft	sql_server	Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability.	NVD-CWE-Other	CVE-2000-0603	2018-10-13 06:29	2000-07-7	Show	GitHub Exploit DB Packet Storm

344373	-	microsoft	outlook outlook_express	Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka …	NVD-CWE-Other	CVE-2000-0621	2018-10-13 06:29	2000-07-20	Show	GitHub Exploit DB Packet Storm

344374	-	microsoft	outlook_express	Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability.	NVD-CWE-Other	CVE-2000-0653	2018-10-13 06:29	2000-07-20	Show	GitHub Exploit DB Packet Storm

344375	-	microsoft	sql_server	Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the "DTS Password" vu…	NVD-CWE-Other	CVE-2000-0654	2018-10-13 06:29	2000-07-11	Show	GitHub Exploit DB Packet Storm

344376	-	microsoft	windows_2000 windows_nt	The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Troj…	NVD-CWE-Other	CVE-2000-0663	2018-10-13 06:29	2000-07-25	Show	GitHub Exploit DB Packet Storm

344377	-	microsoft	windows_2000 windows_nt	The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka th…	NVD-CWE-Other	CVE-2000-0673	2018-10-13 06:29	2000-07-27	Show	GitHub Exploit DB Packet Storm

344378	-	microsoft	windows_2000	The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Nam…	NVD-CWE-Other	CVE-2000-0737	2018-10-13 06:29	2000-10-20	Show	GitHub Exploit DB Packet Storm

344379	-	microsoft	windows_95 windows_98	The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka …	NVD-CWE-Other	CVE-2000-0742	2018-10-13 06:29	2000-10-20	Show	GitHub Exploit DB Packet Storm

344380	-	microsoft	excel powerpoint word	Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerabil…	NVD-CWE-Other	CVE-2000-0765	2018-10-13 06:29	2000-10-20	Show	GitHub Exploit DB Packet Storm