Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203861 9.6 緊急
Network
The PHP Group - PHP の ext/libxml/libxml.c における XML 外部エンティティおよび XML エンティティ拡張攻撃を実行される脆弱性 CWE-Other
その他
CVE-2015-8866 2016-05-25 16:28 2015-02-19 Show GitHub Exploit DB Packet Storm
203862 7.3 重要
Local
The PHP Group
アップル
file project
- PHP の Fileinfo コンポーネントで使用される file の funcs.c の file_check_mem 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-8865 2016-05-25 16:28 2015-06-4 Show GitHub Exploit DB Packet Storm
203863 5.9 警告
Network
マイクロソフト
日立
- Microsoft .NET Framework における重要な平文情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0149 2016-05-24 15:55 2016-05-10 Show GitHub Exploit DB Packet Storm
203864 7.5 重要
Network
openSUSE project
GNOME Project
- librsvg の _rsvg_css_normalize_font_size 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4348 2016-05-24 15:32 2016-05-18 Show GitHub Exploit DB Packet Storm
203865 7.5 重要
Network
GNOME Project - librsvg におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-7558 2016-05-24 15:32 2015-10-22 Show GitHub Exploit DB Packet Storm
203866 7.5 重要
Network
GNOME Project - librsvg の rsvg-shapes.c の _rsvg_node_poly_build_path 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-7557 2016-05-24 15:32 2015-02-6 Show GitHub Exploit DB Packet Storm
203867 8.8 重要
Network
The Foreman - Foreman の Smart-Proxy の TFTP モジュールの tftp_api.rb における Eval インジェクションの脆弱性 CWE-Other
その他
CVE-2016-3728 2016-05-24 15:09 2016-05-5 Show GitHub Exploit DB Packet Storm
203868 5.4 警告
Network
The Foreman - Foreman におけるプライベートのブックマークを読まれる脆弱性 CWE-Other
その他
CVE-2016-2100 2016-05-24 15:09 2016-02-29 Show GitHub Exploit DB Packet Storm
203869 5.3 警告
Network
Haxx - cURL および libcurl におけるサーバになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2016-3739 2016-05-24 15:08 2016-05-18 Show GitHub Exploit DB Packet Storm
203870 6.1 警告
Network
WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5714 2016-05-24 14:51 2015-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349841 - ircd-hybrid
ircd-ratbox
oftc
ircd-hybrid
ircd-ratbox
oftc-hybrid
Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allo… CWE-189
Numeric Errors
CVE-2009-4016 2010-02-5 14:00 2010-02-5 Show GitHub Exploit DB Packet Storm
349842 - comtrend ct-507it_adsl_router Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter. CWE-79
Cross-site Scripting
CVE-2010-0470 2010-02-3 14:00 2010-02-3 Show GitHub Exploit DB Packet Storm
349843 - viewvc viewvc query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access r… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0005 2010-02-2 14:00 2010-01-30 Show GitHub Exploit DB Packet Storm
349844 - mozilla seamonkey
thunderbird
Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APP_TYPE_MAIL or APP_TYPE_EDITOR, which makes it easier for remote a… CWE-200
Information Exposure
CVE-2009-4629 2010-02-2 14:00 2010-01-30 Show GitHub Exploit DB Packet Storm
349845 - cisco unified_meetingplace Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) a… NVD-CWE-noinfo
CVE-2010-0140 2010-01-31 14:00 2010-01-29 Show GitHub Exploit DB Packet Storm
349846 - cisco unified_meetingplace Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml Affected Products Vulnerable Products Cisco Unified MeetingPlace versions 5, 6, and 7 are each affec… NVD-CWE-noinfo
CVE-2010-0140 2010-01-31 14:00 2010-01-29 Show GitHub Exploit DB Packet Storm
349847 - cisco unified_meetingplace MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530. CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0142 2010-01-31 14:00 2010-01-29 Show GitHub Exploit DB Packet Storm
349848 - cisco unified_meetingplace Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml Affected Products Vulnerable Products Cisco Unified MeetingPlace versions 5, 6, and 7 are each affec… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0142 2010-01-31 14:00 2010-01-29 Show GitHub Exploit DB Packet Storm
349849 - sun java_system_application_server The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credential… CWE-16
Configuration
CVE-2010-0386 2010-01-31 14:00 2010-01-26 Show GitHub Exploit DB Packet Storm
349850 - sun java_system_application_server Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1 Contributing Factors This issue can occur in the following releases: * Sun Java System Application Server Standar… CWE-16
Configuration
CVE-2010-0386 2010-01-31 14:00 2010-01-26 Show GitHub Exploit DB Packet Storm