Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
189431 7.8 重要
Local
Google - Android におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-14896 2017-12-27 09:55 2017-12-4 Show GitHub Exploit DB Packet Storm
189432 8.8 重要
Network
日立ヴァンタラ - Hitachi Vantara Pentaho BA プラットフォームにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-10701 2017-12-26 17:50 2016-04-5 Show GitHub Exploit DB Packet Storm
189433 5.5 警告
Local
KMPlayer's Forums - KMPlayer における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-16952 2017-12-26 17:43 2017-11-22 Show GitHub Exploit DB Packet Storm
189434 5.5 警告
Local
Radionomy Group - Winamp Pro における入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2017-16951 2017-12-26 17:43 2017-11-22 Show GitHub Exploit DB Packet Storm
189435 6.5 警告
Network
TP-LINK Technologies - 複数の TP-Link デバイスにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-16959 2017-12-26 17:22 2017-11-28 Show GitHub Exploit DB Packet Storm
189436 8.8 重要
Network
TP-LINK Technologies - 複数の TP-Link デバイスにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2017-16958 2017-12-26 17:22 2017-11-28 Show GitHub Exploit DB Packet Storm
189437 8.8 重要
Network
TP-LINK Technologies - 複数の TP-Link デバイスにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2017-16957 2017-12-26 17:22 2017-11-28 Show GitHub Exploit DB Packet Storm
189438 7.5 重要
Network
X.Org Foundation
Debian
Canonical
- libXcursor における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2017-16612 2017-12-26 17:16 2017-11-25 Show GitHub Exploit DB Packet Storm
189439 7.5 重要
Network
Fiyo CMS - Fiyo CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-17102 2017-12-26 17:09 2017-12-3 Show GitHub Exploit DB Packet Storm
189440 8.8 重要
Network
Squiz - Squiz Matrix におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-14198 2017-12-26 16:44 2017-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355151 - ffmpeg ffmpeg oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted… CWE-189
Numeric Errors
CVE-2009-4632 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
355152 - ffmpeg ffmpeg vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via… CWE-189
Numeric Errors
CVE-2009-4633 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
355153 - ffmpeg ffmpeg Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec… CWE-189
Numeric Errors
CVE-2009-4634 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
355154 - ffmpeg ffmpeg FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to us… CWE-94
Code Injection
CVE-2009-4635 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
355155 - ffmpeg ffmpeg FFmpeg 0.5 allows remote attackers to cause a denial of service (hang) via a crafted file that triggers an infinite loop. CWE-94
Code Injection
CVE-2009-4636 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
355156 - ffmpeg ffmpeg The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) via a crafted AVI file that triggers a divide-by-zero error. CWE-189
Numeric Errors
CVE-2009-4639 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
355157 - ffmpeg ffmpeg Array index error in vorbis_dec.c in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Vorbis file that triggers an out-of-bounds read. CWE-189
Numeric Errors
CVE-2009-4640 2011-10-26 11:44 2010-02-10 Show GitHub Exploit DB Packet Storm
355158 - gnu gnump3d GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file. CWE-59
Link Following
CVE-2005-3349 2011-10-18 13:00 2005-11-19 Show GitHub Exploit DB Packet Storm
355159 - gnu gnump3d Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values". CWE-22
Path Traversal
CVE-2005-3355 2011-10-18 13:00 2005-11-19 Show GitHub Exploit DB Packet Storm
355160 - ibm db2_universal_database IBM DB2 Universal Database (UDB) before 8.2 FixPak 12 allows remote attackers to cause a denial of service (application crash) by sending "incorrect information ... regarding the package name/creator… CWE-399
 Resource Management Errors
CVE-2006-3068 2011-10-17 13:00 2006-06-19 Show GitHub Exploit DB Packet Storm