Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202911	9.8	緊急 Network		-	複数の OS 上で稼動する HPE Operations Manager の AdminUI における任意のコマンドを実行される脆弱性	CWE-Other その他	CVE-2016-4373	2016-08-3 11:26	2016-07-25	Show	GitHub Exploit DB Packet Storm

202912	5	警告	ヒューレット・パッカード日本電気 Apache Software Foundation	-	Apache Tomcat の HTTP Digest Access Authentication 実装における完全性保護の要求を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5062	2016-08-2 17:34	2012-01-14	Show	GitHub Exploit DB Packet Storm

202913	4.3	警告	ヒューレット・パッカード日本電気 Apache Software Foundation	-	Apache Tomcat の HTTP Digest Access Authentication 実装におけるアクセス制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-5063	2016-08-2 17:34	2012-01-14	Show	GitHub Exploit DB Packet Storm

202914	5	警告	ヒューレット・パッカード日本電気 Apache Software Foundation	-	Apache Tomcat の DigestAuthenticator.java における暗号保護機構を回避される脆弱性	CWE-310 暗号の問題	CVE-2011-5064	2016-08-2 17:34	2012-01-14	Show	GitHub Exploit DB Packet Storm

202915	6.9	警告	アップル日本電気 Apache Software Foundation	-	Apache HTTP Server の envvars における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0883	2016-08-2 17:34	2012-03-2	Show	GitHub Exploit DB Packet Storm

202916	2.6	注意	日本電気 Apache Software Foundation アップル富士通オラクル日立	-	Apache HTTP Server の mod_negotiation モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2687	2016-08-2 17:34	2012-06-13	Show	GitHub Exploit DB Packet Storm

202917	5	警告	日本電気日立 Apache Software Foundation オラクル	-	Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-3544	2016-08-2 17:34	2012-09-6	Show	GitHub Exploit DB Packet Storm

202918	5.1	警告	アップル日本電気富士通 Apache Software Foundation オラクル	-	Apache HTTP Server の mod_rewrite モジュールにおける任意のコマンドを実行される脆弱性	CWE-310 暗号の問題	CVE-2013-1862	2016-08-2 17:34	2013-04-18	Show	GitHub Exploit DB Packet Storm

202919	7.5	危険	富士通日本電気 IBM Apache Software Foundation オラクル	-	Apache Struts の CookieInterceptor における ClassLoader を操作される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0113	2016-08-2 17:34	2014-04-28	Show	GitHub Exploit DB Packet Storm

202920	5.8	警告	富士通日本電気 IBM Apache Software Foundation オラクル	-	Apache Struts の CookieInterceptor における ClassLoader を操作される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0116	2016-08-2 17:34	2014-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
353941	-	slackware	slackware_linux	Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument.	NVD-CWE-Other	CVE-1999-1489	2008-09-6 05:19	1997-03-4	Show	GitHub Exploit DB Packet Storm

353942	-	ipswitch	imail	Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.	NVD-CWE-Other	CVE-1999-1497	2008-09-6 05:19	1999-12-21	Show	GitHub Exploit DB Packet Storm

353943	-	slackware	slackware_linux	Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file.	NVD-CWE-Other	CVE-1999-1498	2008-09-6 05:19	1998-04-6	Show	GitHub Exploit DB Packet Storm

353944	-	isc	bind	named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.	NVD-CWE-Other	CVE-1999-1499	2008-09-6 05:19	1998-04-10	Show	GitHub Exploit DB Packet Storm

353945	-	nfr	nfr	Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field.	NVD-CWE-Other	CVE-1999-1503	2008-09-6 05:19	1998-04-8	Show	GitHub Exploit DB Packet Storm

353946	-	stalker	stalker_internet_mail_server	Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.	NVD-CWE-Other	CVE-1999-1504	2008-09-6 05:19	1998-04-8	Show	GitHub Exploit DB Packet Storm

353947	-	sun	sunos	Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.	NVD-CWE-Other	CVE-1999-1506	2008-09-6 05:19	1990-01-29	Show	GitHub Exploit DB Packet Storm

353948	-	sgi	irix	/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.	NVD-CWE-Other	CVE-1999-1554	2008-09-6 05:19	1990-10-31	Show	GitHub Exploit DB Packet Storm

353949	-	digital	digital_openvms digital_openvms_axp	Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled.	NVD-CWE-Other	CVE-1999-1558	2008-09-6 05:19	1998-07-16	Show	GitHub Exploit DB Packet Storm

353950	-	nullsoft	shoutcast_server	Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server.	NVD-CWE-Other	CVE-1999-1561	2008-09-6 05:19	1999-08-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed