Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206601 5 警告 IBM - IBM WebSphere MQ Light におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-4943 2016-01-6 15:08 2015-12-21 Show GitHub Exploit DB Packet Storm
206602 5 警告 IBM - IBM WebSphere MQ Light におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-4941 2016-01-6 15:08 2015-12-21 Show GitHub Exploit DB Packet Storm
206603 8.3 危険 ZyXEL - ZyXEL PMG5318-B20A デバイスのファームウェアにおける管理者権限を取得される脆弱性 CWE-264
CWE-Other
CVE-2015-6020 2016-01-5 18:03 2015-10-13 Show GitHub Exploit DB Packet Storm
206604 5 警告 ZyXEL - ZyXEL PMG5318-B20A デバイスのファームウェアの管理ポータルにおけるアクセス制限を回避される脆弱性 CWE-Other
CWE-Other
CVE-2015-6019 2016-01-5 18:03 2015-10-13 Show GitHub Exploit DB Packet Storm
206605 10 危険 ZyXEL - ZyXEL PMG5318-B20A デバイスのファームウェアの diagnostic ping の実装における任意のコマンドを実行される脆弱性 CWE-20
CWE-264
CVE-2015-6018 2016-01-5 18:03 2015-10-13 Show GitHub Exploit DB Packet Storm
206606 4.3 警告 ZyXEL - ZyXEL P-660HW-T1 v2 デバイスのファームウェア ZyNOS の Forms/rpAuth_1 におけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-Other
CVE-2015-6017 2016-01-5 18:03 2015-10-13 Show GitHub Exploit DB Packet Storm
206607 10 危険 ZyXEL - 複数の ZyXEL 製品における管理アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2015-6016 2016-01-5 18:03 2015-10-13 Show GitHub Exploit DB Packet Storm
206608 4 警告 ZTE - ZTE ZXHN H108N R1A および ZXV10 W300 デバイスにおけるアクセス制限を回避される脆弱性 CWE-200
情報漏えい 		CVE-2015-8703 2016-01-5 16:34 2015-11-3 Show GitHub Exploit DB Packet Storm
206609 4.3 警告 ZTE - ZTE ZXHN H108N R1A デバイスの cgi-bin/webproc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-7252 2016-01-5 16:34 2015-11-3 Show GitHub Exploit DB Packet Storm
206610 10 危険 ZTE - ZTE ZXHN H108N R1A デバイスにおける管理アクセス権を取得される脆弱性 CWE-255
CWE-Other
CVE-2015-7251 2016-01-5 16:34 2015-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348771 - phpbb_group phpbb db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2002-0473 2016-09-17 10:59 2002-08-12 Show GitHub Exploit DB Packet Storm
348772 - pablo_software_solutions pablo_ftp_server Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. NVD-CWE-Other
CVE-2002-1054 2016-09-17 10:59 2002-10-4 Show GitHub Exploit DB Packet Storm
348773 - sun java Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and av… NVD-CWE-noinfo
CVE-2010-0887 2016-08-23 11:01 2010-04-21 Show GitHub Exploit DB Packet Storm
348774 - php php The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by ca… CWE-200
Information Exposure 		CVE-2010-1860 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
348775 - php php The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an… CWE-200
Information Exposure 		CVE-2010-1862 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
348776 - php php The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an… CWE-200
Information Exposure 		CVE-2010-1864 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
348777 - php php The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (mem… CWE-200
Information Exposure 		CVE-2010-2097 2016-08-23 11:01 2010-05-28 Show GitHub Exploit DB Packet Storm
348778 - php php The (1) htmlentities, (2) htmlspecialchars, (3) str_getcsv, (4) http_build_query, (5) strpbrk, and (6) strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attacker… CWE-200
Information Exposure 		CVE-2010-2100 2016-08-23 11:01 2010-05-28 Show GitHub Exploit DB Packet Storm
348779 - php php The (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain … CWE-200
Information Exposure 		CVE-2010-2101 2016-08-23 11:01 2010-05-28 Show GitHub Exploit DB Packet Storm
348780 - multitheftauto multitheftauto MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted command 40 that causes a -1 length to be used and triggers an out-of-boun… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-3065 2016-05-28 00:46 2005-09-28 Show GitHub Exploit DB Packet Storm