Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205221 4 警告 OpenSSL Project - OpenSSL における Change Cipher Spec メッセージの処理に脆弱性 CWE-Other
その他 		CVE-2014-0224 2016-11-22 16:00 2014-06-6 Show GitHub Exploit DB Packet Storm
205222 4.3 警告 IBM
Apache Software Foundation
オラクル		 - Apache Tomcat における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0119 2016-11-22 16:00 2014-05-21 Show GitHub Exploit DB Packet Storm
205223 4.3 警告 日立
IBM
Apache Software Foundation
オラクル		 - Apache Tomcat の java/org/apache/tomcat/util/buf/Ascii.java における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-0099 2016-11-22 16:00 2014-03-27 Show GitHub Exploit DB Packet Storm
205224 4.3 警告 日立
IBM
Apache Software Foundation
オラクル		 - Apache Tomcat のデフォルトサーブレットにおけるセキュリティマネージャの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0096 2016-11-22 16:00 2014-03-27 Show GitHub Exploit DB Packet Storm
205225 5 警告 日立
IBM
Apache Software Foundation
オラクル		 - Apache Tomcat の java/org/apache/coyote/http11/filters/ChunkedInputFilter.java における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-0075 2016-11-22 16:00 2014-03-27 Show GitHub Exploit DB Packet Storm
205226 5 警告 Apache Software Foundation
オラクル		 - Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0050 2016-11-22 16:00 2014-02-10 Show GitHub Exploit DB Packet Storm
205227 4.3 警告 Apache Software Foundation
オラクル		 - Apache Tomcat における "Tomcat の内部" 情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4590 2016-11-22 16:00 2013-12-26 Show GitHub Exploit DB Packet Storm
205228 6.8 警告 Apache Software Foundation
オラクル		 - Apache Tomcat における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-4444 2016-11-22 16:00 2013-05-9 Show GitHub Exploit DB Packet Storm
205229 4.3 警告 IBM
Apache Software Foundation
オラクル		 - Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4322 2016-11-22 16:00 2013-12-26 Show GitHub Exploit DB Packet Storm
205230 5.8 警告 Apache Software Foundation
オラクル		 - Apache Tomcat におけるリクエスト長の誤った識別を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4286 2016-11-22 16:00 2013-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350371 - aspindir lookmer_muzik_portal LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarki… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1116 2017-08-17 10:32 2010-03-26 Show GitHub Exploit DB Packet Storm
350372 - georg_greve spamassassin_milter_plugin The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell metacharacter… CWE-78
OS Command  		CVE-2010-1132 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
350373 - tiki tikiwiki_cms\/groupware Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchin… CWE-89
SQL Injection 		CVE-2010-1133 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
350374 - tiki tikiwiki_cms\/groupware SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable. CWE-89
SQL Injection 		CVE-2010-1134 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
350375 - tiki tikiwiki_cms\/groupware The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse. CWE-255
Credentials Management 		CVE-2010-1135 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
350376 - tiki tikiwiki_cms\/groupware The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictabl… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-1136 2017-08-17 10:32 2010-03-28 Show GitHub Exploit DB Packet Storm
350377 - irssi irssi Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certific… CWE-20
 Improper Input Validation  		CVE-2010-1155 2017-08-17 10:32 2010-04-17 Show GitHub Exploit DB Packet Storm
350378 - irssi irssi core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at th… NVD-CWE-Other
CVE-2010-1156 2017-08-17 10:32 2010-04-17 Show GitHub Exploit DB Packet Storm
350379 - irssi irssi Per: http://cwe.mitre.org/data/definitions/476.html 'NULL Pointer Dereference' NVD-CWE-Other
CVE-2010-1156 2017-08-17 10:32 2010-04-17 Show GitHub Exploit DB Packet Storm
350380 - atlassian jira Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path an… CWE-94
Code Injection 		CVE-2010-1165 2017-08-17 10:32 2010-04-21 Show GitHub Exploit DB Packet Storm