Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
189751 7.8 重要
Local 		Google - Android における二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2017-11032 2017-12-6 17:03 2017-11-6 Show GitHub Exploit DB Packet Storm
189752 5.5 警告
Local 		Apache Software Foundation - Apache Karaf における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0219 2017-12-6 16:29 2014-05-8 Show GitHub Exploit DB Packet Storm
189753 8.2 重要
Local 		シスコシステムズ - Cisco Umbrella Insights Virtual Appliance におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2017-12350 2017-12-6 16:18 2017-11-15 Show GitHub Exploit DB Packet Storm
189754 9.8 緊急
Network 		シスコシステムズ - Cisco Voice Operating System ソフトウェアプラットフォームベースのコラボレーション製品における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2017-12337 2017-12-6 16:18 2017-11-15 Show GitHub Exploit DB Packet Storm
189755 6.1 警告
Network 		シスコシステムズ - Cisco Registered Envelope Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12323 2017-12-6 16:18 2017-11-15 Show GitHub Exploit DB Packet Storm
189756 6.1 警告
Network 		シスコシステムズ - Cisco Registered Envelope Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12321 2017-12-6 16:18 2017-11-15 Show GitHub Exploit DB Packet Storm
189757 6.1 警告
Network 		シスコシステムズ - Cisco Registered Envelope Service におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-12320 2017-12-6 16:18 2017-11-15 Show GitHub Exploit DB Packet Storm
189758 7.5 重要
Network 		シスコシステムズ - Cisco RF Gateway 1 デバイスにおけるリソース管理に関する脆弱性 CWE-399
リソース管理の問題 		CVE-2017-12318 2017-12-6 16:18 2017-11-15 Show GitHub Exploit DB Packet Storm
189759 4.7 警告
Local 		マイクロソフト - Microsoft Windows Embedded OpenType フォントエンジンにおける公開を意図しないデータを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2017-11832 2017-12-6 15:58 2017-11-14 Show GitHub Exploit DB Packet Storm
189760 4.7 警告
Local 		マイクロソフト - 複数の Microsoft Windows 製品の Windows カーネルにおける巧妙に細工されたアプリケ—ションを実行される脆弱性 CWE-200
情報漏えい 		CVE-2017-11880 2017-12-6 15:58 2017-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353441 - w-agora w-agora list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter. NVD-CWE-Other
CVE-2004-1565 2016-10-18 11:56 2004-12-31 Show GitHub Exploit DB Packet Storm
353442 - minihttpserver.net web_forums_server Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot sl… NVD-CWE-Other
CVE-2004-1496 2016-10-18 11:55 2004-12-31 Show GitHub Exploit DB Packet Storm
353443 - - - Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges. NVD-CWE-Other
CVE-2004-1497 2016-10-18 11:55 2004-12-31 Show GitHub Exploit DB Packet Storm
353444 - webhost_automation helm_control_panel SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter. NVD-CWE-Other
CVE-2004-1498 2016-10-18 11:55 2004-12-31 Show GitHub Exploit DB Packet Storm
353445 - jelsoft vbulletin SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php. NVD-CWE-Other
CVE-2004-1515 2016-10-18 11:55 2004-12-31 Show GitHub Exploit DB Packet Storm
353446 - new_media_generation hired_team_trial Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrator. NVD-CWE-Other
CVE-2004-1526 2016-10-18 11:55 2004-12-31 Show GitHub Exploit DB Packet Storm
353447 - mediawiki mediawiki MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary c… NVD-CWE-Other
CVE-2004-1405 2016-10-18 11:54 2004-12-31 Show GitHub Exploit DB Packet Storm
353448 - singapore image_gallery_web_application Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject arbitrary web script or HTML. NVD-CWE-Other
CVE-2004-1409 2016-10-18 11:54 2004-12-31 Show GitHub Exploit DB Packet Storm
353449 - gadu-gadu gadu-gadu_instant_messenger Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing… NVD-CWE-Other
CVE-2004-1410 2016-10-18 11:54 2004-12-31 Show GitHub Exploit DB Packet Storm
353450 - gadu-gadu gadu-gadu_instant_messenger Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images. NVD-CWE-Other
CVE-2004-1414 2016-10-18 11:54 2004-12-31 Show GitHub Exploit DB Packet Storm