Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202971 7.1 重要
Network 		Apache Software Foundation - Apache Ranger の Policy Admin Tool におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-0266 2016-04-14 16:03 2015-08-5 Show GitHub Exploit DB Packet Storm
202972 8.8 重要
Network 		Puppet - Puppet Enterprise におけるホストのホワイトリスト保護メカニズムを回避される脆弱性 CWE-Other
その他 		CVE-2015-7330 2016-04-14 15:11 2015-12-29 Show GitHub Exploit DB Packet Storm
202973 7.3 重要
Network 		レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される TripleO Heat テンプレートにおけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5329 2016-04-14 15:04 2015-12-21 Show GitHub Exploit DB Packet Storm
202974 8.8 重要
Network 		The Cacti Group - Cacti の graph_view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-3659 2016-04-14 15:03 2016-03-24 Show GitHub Exploit DB Packet Storm
202975 8.8 重要
Network 		The Cacti Group - Cacti の tree.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-3172 2016-04-14 15:03 2016-03-18 Show GitHub Exploit DB Packet Storm
202976 7.5 重要
Network 		Debian
dhcpcd project		 - dhcpcd の dhcp.c の decode_search 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-6700 2016-04-14 14:38 2016-03-31 Show GitHub Exploit DB Packet Storm
202977 7.5 重要
Network 		Debian
dhcpcd project		 - dhcpcd の dhcp.c の decode_search 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-6699 2016-04-14 14:38 2016-03-31 Show GitHub Exploit DB Packet Storm
202978 7.5 重要
Network 		Debian
dhcpcd project		 - dhcpcd の dhcp.c の decode_search 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-6698 2016-04-14 14:38 2016-03-31 Show GitHub Exploit DB Packet Storm
202979 5.9 警告
Network 		openSUSE project
ERLANG		 - Erlang/OTP における平文データを取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-2774 2016-04-14 14:25 2015-03-26 Show GitHub Exploit DB Packet Storm
202980 9.8 緊急
Network 		SUSE
openSUSE project
Git project		 - Git における整数オーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-2324 2016-04-13 14:15 2016-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347941 - ipswitch imail Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users. NVD-CWE-Other
CVE-2001-1284 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
347942 - ipswitch imail Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter. NVD-CWE-Other
CVE-2001-1285 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
347943 - ipswitch imail Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be … NVD-CWE-Other
CVE-2001-1286 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
347944 - ipswitch imail Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. NVD-CWE-Other
CVE-2001-1287 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
347945 - id_software quake_3_arena Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters. NVD-CWE-Other
CVE-2001-1289 2008-09-11 04:10 2001-07-29 Show GitHub Exploit DB Packet Storm
347946 - 3com 3cr29223 Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request. NVD-CWE-Other
CVE-2001-1293 2008-09-11 04:10 2001-09-26 Show GitHub Exploit DB Packet Storm
347947 - avtronics inetserv Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password. NVD-CWE-Other
CVE-2001-1294 2008-09-11 04:10 2001-08-22 Show GitHub Exploit DB Packet Storm
347948 - marc_logemann more.groupware More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable. NVD-CWE-Other
CVE-2001-1296 2008-09-11 04:10 2001-10-2 Show GitHub Exploit DB Packet Storm
347949 - actionpoll actionpoll PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter. NVD-CWE-Other
CVE-2001-1297 2008-09-11 04:10 2001-10-2 Show GitHub Exploit DB Packet Storm
347950 - grant_horwood webodex Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable. NVD-CWE-Other
CVE-2001-1298 2008-09-11 04:10 2001-10-2 Show GitHub Exploit DB Packet Storm