Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189751 9.8 緊急
Network 		Kyle Ross - npm/KyleRoss windows-cpu におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2017-1000219 2017-12-12 11:31 2017-05-20 Show GitHub Exploit DB Packet Storm
189752 6.1 警告
Network 		FineCMS project - dayrui FineCms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-16866 2017-12-12 11:31 2017-11-16 Show GitHub Exploit DB Packet Storm
189753 7.8 重要
Local 		VMware - VMware AirWatch Console における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-4931 2017-12-12 11:31 2017-11-8 Show GitHub Exploit DB Packet Storm
189754 5.4 警告
Network 		VMware - VMware AirWatch Console におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-4930 2017-12-12 11:31 2017-11-8 Show GitHub Exploit DB Packet Storm
189755 9.8 緊急
Network 		Redis Store - Redis-store における信頼性のないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2017-1000248 2017-12-12 11:20 2017-08-16 Show GitHub Exploit DB Packet Storm
189756 5.3 警告
Network 		Fullworks Digital Ltd - WordPress 用 Stop User Enumeration プラグインにおける情報漏えいに関する脆弱性が存在します。 CWE-200
情報漏えい 		CVE-2017-1000226 2017-12-12 11:19 2017-07-25 Show GitHub Exploit DB Packet Storm
189757 7.2 重要
Network 		Apache Software Foundation - Apache CouchDB における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2017-12636 2017-12-12 10:48 2017-11-15 Show GitHub Exploit DB Packet Storm
189758 9.8 緊急
Network 		Apache Software Foundation - Apache CouchDB における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-12635 2017-12-12 10:48 2017-11-15 Show GitHub Exploit DB Packet Storm
189759 7.8 重要
Local 		PNP4Nagios - PNP4Nagios における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-16834 2017-12-12 10:38 2017-11-3 Show GitHub Exploit DB Packet Storm
189760 7.8 重要
Local 		Trusted Boot project - Trusted Boot における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-16837 2017-12-12 10:38 2017-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350031 - sergey_kiselev sgallery SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the (1) idalbum or (2) idimage parameters. NVD-CWE-Other
CVE-2005-0377 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350032 - horde horde Multiple cross-site scripting (XSS) vulnerabilities in Horde 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to prefs.php or (2) url parameter to index.p… NVD-CWE-Other
CVE-2005-0378 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350033 - zeroboard zeroboard Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlog… NVD-CWE-Other
CVE-2005-0379 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350034 - zeroboard zeroboard Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attacke… NVD-CWE-Other
CVE-2005-0380 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350035 - forumkit forumkit Cross-site scripting (XSS) vulnerability in f.aspx in forumKIT 1.0 allows remote attackers to inject arbitrary web script or HTML via the members parameter. NVD-CWE-Other
CVE-2005-0381 2017-07-11 10:32 2005-01-13 Show GitHub Exploit DB Packet Storm
350036 - breed breed Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP packet, which triggers a null dereference. NVD-CWE-Other
CVE-2005-0382 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350037 - trend_micro control_manager Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password. NVD-CWE-Other
CVE-2005-0383 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350038 - daniel_de_rauglaudre geneweb geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files. NVD-CWE-Other
CVE-2005-0391 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
350039 - spidean postwrap Cross-site scripting (XSS) vulnerability in Spidean PostWrap allows remote attackers to inject arbitrary HTML and web script via the page parameter. NVD-CWE-Other
CVE-2005-0412 2017-07-11 10:32 2005-04-27 Show GitHub Exploit DB Packet Storm
350040 - mercuryboard mercuryboard SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu p… NVD-CWE-Other
CVE-2005-0414 2017-07-11 10:32 2005-04-27 Show GitHub Exploit DB Packet Storm