Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 12:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217691	7.1	危険	IBM	-	IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの systest.php における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2014-3085	2014-08-26 17:42	2014-07-14	Show	GitHub Exploit DB Packet Storm

217692	6.3	警告	IBM	-	IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの prodtest.php における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2014-3081	2014-08-26 17:42	2014-07-14	Show	GitHub Exploit DB Packet Storm

217693	6.8	警告	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-5333	2014-08-26 17:40	2014-08-12	Show	GitHub Exploit DB Packet Storm

217694	6.8	警告	GNU Project IBM	-	GnuTLS の lib/gnutls_handshake.c の read_server_hello 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-3466	2014-08-26 17:40	2014-05-29	Show	GitHub Exploit DB Packet Storm

217695	7.5	危険	Schrack	-	Schrack Technik microControl のファームウェアの Web インターフェースにおけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-5396	2014-08-26 17:32	2014-07-10	Show	GitHub Exploit DB Packet Storm

217696	5	警告	WP Content Source Control project	-	WordPress 用 WP Content Source Control プラグインの downloadfiles/download.php の file_get_contents 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-5368	2014-08-26 16:13	2014-08-19	Show	GitHub Exploit DB Packet Storm

217697	7.2	危険	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおけるデバイスロックおよびカーネルの署名の制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2014-4325	2014-08-26 15:45	2014-08-5	Show	GitHub Exploit DB Packet Storm

217698	1.9	注意	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおける制御可能なメモリ領域にデータを書き込まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0974	2014-08-26 15:39	2014-07-23	Show	GitHub Exploit DB Packet Storm

217699	7.2	危険	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおけるブートイメージの認証要件を回避される脆弱性	CWE-287 不適切な認証	CVE-2014-0973	2014-08-26 15:37	2014-06-13	Show	GitHub Exploit DB Packet Storm

217700	4.6	警告	SaltStack	-	Salt における脆弱性	CWE-59 リンク解釈の問題	CVE-2014-3563	2014-08-26 15:16	2014-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
353821	-	sonicwall	soho_firewall	The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.	NVD-CWE-Other	CVE-2000-1098	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353822	-	trlinux	postaci_webmail	The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as data…	NVD-CWE-Other	CVE-2000-1100	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353823	-	texas_imperial_software	wftpd	Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a var…	NVD-CWE-Other	CVE-2000-1101	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353824	-	ptlink	ptlink_irc_services ptlink_ircd	PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands.	NVD-CWE-Other	CVE-2000-1102	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353825	-	bsdi	bsd_os	rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command li…	NVD-CWE-Other	CVE-2000-1103	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353826	-	microsoft	indexing_service	The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 sy…	NVD-CWE-Other	CVE-2000-1105	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353827	-	ibm	net.data	document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program.	NVD-CWE-Other	CVE-2000-1110	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353828	-	unify	ewave_servletexec	Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".	NVD-CWE-Other	CVE-2000-1114	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353829	-	24link	24link	24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request.	NVD-CWE-Other	CVE-2000-1118	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm

353830	-	hp	hp-ux	registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to …	NVD-CWE-Other	CVE-2000-1127	2008-09-6 05:22	2001-01-9	Show	GitHub Exploit DB Packet Storm