Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202661	7.8	重要 Local	Linux	-	Linux Kernel の kernel/bpf/verifier.c の replace_map_fd_with_map_ptr 関数における権限を取得される脆弱性	CWE-Other その他	CVE-2016-4557	2016-05-26 15:22	2016-05-18	Show	GitHub Exploit DB Packet Storm

202662	7.5	重要 Network	Linux	-	Linux Kernel の net/llc/af_llc.c の llc_cmsg_rcv 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-4485	2016-05-26 15:22	2016-05-18	Show	GitHub Exploit DB Packet Storm

202663	6.1	警告 Network	株式会社シロハチ	-	株式会社シロハチ製の複数の EC-CUBE 用フリーエリア追加プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1205	2016-05-25 17:48	2016-04-26	Show	GitHub Exploit DB Packet Storm

202664	6.1	警告 Network	John Dyer WordPress.org	-	WordPress で使用される MediaElement.js の flash/FlashMediaElement.as におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4567	2016-05-25 16:57	2016-05-5	Show	GitHub Exploit DB Packet Storm

202665	6.1	警告 Network	WordPress.org Moxiecode Systems	-	WordPress で使用される Plupload の plupload.flash.swf におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4566	2016-05-25 16:57	2016-05-15	Show	GitHub Exploit DB Packet Storm

202666	8.6	重要 Network	WordPress.org	-	WordPress の wp-includes/http.php の wp_http_validate_url 関数におけるサーバサイドのリクエストフォージェリ攻撃を実行される脆弱性	CWE-Other その他	CVE-2016-2222	2016-05-25 16:57	2016-02-2	Show	GitHub Exploit DB Packet Storm

202667	7.4	重要 Network	WordPress.org	-	WordPress の wp-includes/pluggable.php の wp_validate_redirect 関数におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2016-2221	2016-05-25 16:57	2016-02-2	Show	GitHub Exploit DB Packet Storm

202668	6.1	警告 Network	WordPress.org	-	WordPress の wp-includes/class-wp-theme.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1564	2016-05-25 16:57	2016-01-6	Show	GitHub Exploit DB Packet Storm

202669	6.1	警告 Network	WordPress.org	-	WordPress の wp-includes/wp-db.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-8834	2016-05-25 16:57	2015-05-6	Show	GitHub Exploit DB Packet Storm

202670	5.4	警告 Network	WordPress.org	-	WordPress のユーザリストのテーブルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-7989	2016-05-25 16:57	2015-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351441	-	francisco_burzi	php-nuke	index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that l…	NVD-CWE-Other	CVE-2002-0483	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351442	-	workforceroi	xpede	Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by…	NVD-CWE-Other	CVE-2002-0487	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351443	-	instant_web_mail	instant_web_mail	Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain m…	NVD-CWE-Other	CVE-2002-0490	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351444	-	alguest	alguest	admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileg…	NVD-CWE-Other	CVE-2002-0491	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351445	-	dcscripts	dcshop	dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.	NVD-CWE-Other	CVE-2002-0492	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351446	-	websight_directory_system	websight_directory_system	Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission con…	NVD-CWE-Other	CVE-2002-0494	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351447	-	websight_directory_system	websight_directory_system	This vulnerability is addressed in the following product release: WebSight Directory System, WebSight Directory System, 0.1.1	NVD-CWE-Other	CVE-2002-0494	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351448	-	southwest	southwest	The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002.	NVD-CWE-Other	CVE-2002-0496	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351449	-	mtr	mtr	Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.	NVD-CWE-Other	CVE-2002-0497	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

351450	-	etnus	totalview	Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users.	NVD-CWE-Other	CVE-2002-0498	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm