Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202881	7.8	重要 Local	Linux	-	Linux Kernel の kernel/bpf/verifier.c の replace_map_fd_with_map_ptr 関数における権限を取得される脆弱性	CWE-Other その他	CVE-2016-4557	2016-05-26 15:22	2016-05-18	Show	GitHub Exploit DB Packet Storm

202882	7.5	重要 Network	Linux	-	Linux Kernel の net/llc/af_llc.c の llc_cmsg_rcv 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-4485	2016-05-26 15:22	2016-05-18	Show	GitHub Exploit DB Packet Storm

202883	6.1	警告 Network	株式会社シロハチ	-	株式会社シロハチ製の複数の EC-CUBE 用フリーエリア追加プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1205	2016-05-25 17:48	2016-04-26	Show	GitHub Exploit DB Packet Storm

202884	6.1	警告 Network	John Dyer WordPress.org	-	WordPress で使用される MediaElement.js の flash/FlashMediaElement.as におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4567	2016-05-25 16:57	2016-05-5	Show	GitHub Exploit DB Packet Storm

202885	6.1	警告 Network	WordPress.org Moxiecode Systems	-	WordPress で使用される Plupload の plupload.flash.swf におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4566	2016-05-25 16:57	2016-05-15	Show	GitHub Exploit DB Packet Storm

202886	8.6	重要 Network	WordPress.org	-	WordPress の wp-includes/http.php の wp_http_validate_url 関数におけるサーバサイドのリクエストフォージェリ攻撃を実行される脆弱性	CWE-Other その他	CVE-2016-2222	2016-05-25 16:57	2016-02-2	Show	GitHub Exploit DB Packet Storm

202887	7.4	重要 Network	WordPress.org	-	WordPress の wp-includes/pluggable.php の wp_validate_redirect 関数におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2016-2221	2016-05-25 16:57	2016-02-2	Show	GitHub Exploit DB Packet Storm

202888	6.1	警告 Network	WordPress.org	-	WordPress の wp-includes/class-wp-theme.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1564	2016-05-25 16:57	2016-01-6	Show	GitHub Exploit DB Packet Storm

202889	6.1	警告 Network	WordPress.org	-	WordPress の wp-includes/wp-db.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-8834	2016-05-25 16:57	2015-05-6	Show	GitHub Exploit DB Packet Storm

202890	5.4	警告 Network	WordPress.org	-	WordPress のユーザリストのテーブルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-7989	2016-05-25 16:57	2015-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351581	-	mailscanner	mailscanner	MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate c…	CWE-20 Improper Input Validation	CVE-2002-2228	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351582	-	sapio_design_ltd	webreflex	Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.	CWE-22 Path Traversal	CVE-2002-2229	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351583	-	mollensoft_software	enceladus_server_suite	Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2232	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351584	-	netscreen	screenos	NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.	CWE-16 Configuration	CVE-2002-2234	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351585	-	jelsoft	vbulletin	member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which fac…	CWE-189 Numeric Errors	CVE-2002-2235	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351586	-	apt-www-proxy	apt-www-proxy	Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.	CWE-20 Improper Input Validation	CVE-2002-2236	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351587	-	netbsd	ftpd	ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls an…	CWE-189 Numeric Errors	CVE-2002-2245	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351588	-	hp	secure_web_server_for_tru64	Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might…	NVD-CWE-noinfo	CVE-2002-2264	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351589	-	hp	secure_web_server_for_tru64	More Information: http://www.securityfocus.com/bid/6175/info	NVD-CWE-noinfo	CVE-2002-2264	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351590	-	pyramid	benhur_software_update	The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20.	NVD-CWE-Other	CVE-2002-2307	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm