Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232031 4.3 警告 sonicbb - SonicBB における重要な情報を取得される脆弱性 - CVE-2007-1901 2012-12-20 18:19 2007-05-14 Show GitHub Exploit DB Packet Storm
232032 6.5 警告 WordPress.org - WordPress の xmlrpc における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-1897 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
232033 5.8 警告 sky gunning - Sky GUNNING MySpeach の chat.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1896 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
232034 6.8 警告 sky gunning - Sky GUNNING MySpeach の chat.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1895 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
232035 4.3 警告 WordPress.org - WordPress の wp-includes/general-template.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1894 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
232036 4.9 警告 WordPress.org - WordPress の xmlrpc におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-1893 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
232037 7.8 危険 VMware - VMware Workstation におけるゲスト OS がサービス運用妨害 (DoS) 状態となる脆弱性 - CVE-2007-1877 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
232038 7.2 危険 VMware - VMware Workstation における "仮想マシンに登録されたコンテキストが破損" する脆弱性 - CVE-2007-1876 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
232039 4.3 警告 toenda software development - toendaCMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1872 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
232040 7.5 危険 webasyst llc - Shop-Script FREE の smarty/smarty_class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1855 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351231 - andrew_tridgell rsync Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary… NVD-CWE-Other
CVE-2002-0048 2016-10-18 11:15 2002-02-27 Show GitHub Exploit DB Packet Storm
351232 - squid
redhat
squid
linux
Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions. NVD-CWE-Other
CVE-2002-0067 2016-10-18 11:15 2002-03-8 Show GitHub Exploit DB Packet Storm
351233 - squid
redhat
squid
linux
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which… NVD-CWE-Other
CVE-2002-0068 2016-10-18 11:15 2002-03-8 Show GitHub Exploit DB Packet Storm
351234 - squid
redhat
squid
linux
Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service. NVD-CWE-Other
CVE-2002-0069 2016-10-18 11:15 2002-03-8 Show GitHub Exploit DB Packet Storm
351235 - php php Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTT… NVD-CWE-Other
CVE-2002-0081 2016-10-18 11:15 2002-03-8 Show GitHub Exploit DB Packet Storm
351236 - ultraedit ultraedit-32 UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges. NVD-CWE-Other
CVE-2001-0983 2016-10-18 11:14 2001-08-31 Show GitHub Exploit DB Packet Storm
351237 - webct respondus Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges. NVD-CWE-Other
CVE-2001-1003 2016-10-18 11:14 2001-08-31 Show GitHub Exploit DB Packet Storm
351238 - oracle database_server oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory … NVD-CWE-Other
CVE-2001-1041 2016-10-18 11:14 2001-08-31 Show GitHub Exploit DB Packet Storm
351239 - webmin webmin Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument. NVD-CWE-Other
CVE-2001-1196 2016-10-18 11:14 2001-12-17 Show GitHub Exploit DB Packet Storm
351240 - timecop wmcube_gdk Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file. NVD-CWE-Other
CVE-2001-1201 2016-10-18 11:14 2001-12-17 Show GitHub Exploit DB Packet Storm