Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190101 6 警告
Local 		Linux - Linux Kernel における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-12168 2017-10-11 13:47 2017-09-19 Show GitHub Exploit DB Packet Storm
190102 6.1 警告
Network 		Magento, Inc. - Magento E-Commerce Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9758 2017-10-11 11:58 2014-10-21 Show GitHub Exploit DB Packet Storm
190103 6.1 警告
Network 		Joomla! - Joomla! CMS におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2015-5608 2017-10-11 11:53 2015-06-30 Show GitHub Exploit DB Packet Storm
190104 9.8 緊急
Network 		FiberHome Technologies Group - FiberHome User End Routers Bearing Model Number AN1020-25 におけるセキュリティ機能に関する脆弱性 CWE-254
セキュリティ機能 		CVE-2017-14147 2017-10-11 11:49 2017-09-5 Show GitHub Exploit DB Packet Storm
190105 7.5 重要
Network 		The Document Foundation
libwpd project		 - libwpd および LibreOffice におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-14226 2017-10-11 10:41 2017-09-7 Show GitHub Exploit DB Packet Storm
190106 8.8 重要
Local 		Xen プロジェクト - Xen における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-14319 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190107 6.5 警告
Local 		Xen プロジェクト - Xen における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2017-14318 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190108 5.6 警告
Local 		Xen プロジェクト - Xen における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2017-14317 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190109 8.8 重要
Local 		Xen プロジェクト - Xen における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-14316 2017-10-11 10:35 2017-09-12 Show GitHub Exploit DB Packet Storm
190110 9.8 緊急
Network 		UserDashboard project - Drupal 用 User Dashboard モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-7877 2017-10-11 10:30 2015-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353511 - ubuntu ubuntu_linux passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileg… NVD-CWE-Other
CVE-2006-3378 2008-09-6 06:06 2006-07-7 Show GitHub Exploit DB Packet Storm
353512 - amule amule Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors, probably related to directory traversal. NVD-CWE-Other
CVE-2006-2692 2008-09-6 06:05 2006-05-31 Show GitHub Exploit DB Packet Storm
353513 - amule amule Successful exploitation requires that the full pathname of the file is known. This vulnerability is addressed in the following product release: aMule, aMule, 2.1.2 NVD-CWE-Other
CVE-2006-2692 2008-09-6 06:05 2006-05-31 Show GitHub Exploit DB Packet Storm
353514 - jetty jetty Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2… CWE-22
Path Traversal 		CVE-2006-2758 2008-09-6 06:05 2006-06-2 Show GitHub Exploit DB Packet Storm
353515 - jetty jetty jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations. NVD-CWE-Other
CVE-2006-2759 2008-09-6 06:05 2006-06-2 Show GitHub Exploit DB Packet Storm
353516 - xiti xiti_tracking_script Multiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow remote attackers to inject arbitrary web script or HTML via (1) the xtref parameter in xiti.js and (2) an … NVD-CWE-Other
CVE-2006-2795 2008-09-6 06:05 2006-06-3 Show GitHub Exploit DB Packet Storm
353517 - jelsoft vbulletin SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter. NVD-CWE-Other
CVE-2006-2805 2008-09-6 06:05 2006-06-3 Show GitHub Exploit DB Packet Storm
353518 - visiongate visiongate_portal_system Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of t… NVD-CWE-Other
CVE-2006-2846 2008-09-6 06:05 2006-06-7 Show GitHub Exploit DB Packet Storm
353519 - skoom i.list Cross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the banurl parameter to add.php. NOTE: the provenance of th… NVD-CWE-Other
CVE-2006-2957 2008-09-6 06:05 2006-06-13 Show GitHub Exploit DB Packet Storm
353520 - arantius vice_stats SQL injection vulnerability in vs_search.php in Arantius Vice Stats before 1.0.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2006-2972. NVD-CWE-Other
CVE-2006-2981 2008-09-6 06:05 2006-06-13 Show GitHub Exploit DB Packet Storm