Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
190441	5.5	警告 Local	ソフォス	-	Sophos SurfRight HitmanPro におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-6007	2017-10-10 16:02	2017-06-27	Show	GitHub Exploit DB Packet Storm

190442	4.8	警告 Network	AITpro	-	WordPress 用 BulletProof Security プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-9230	2017-10-10 16:02	2015-09-9	Show	GitHub Exploit DB Packet Storm

190443	4.8	警告 Network	Imagely	-	WordPress 用 Photocrati NextGEN Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-9229	2017-10-10 16:02	2015-09-14	Show	GitHub Exploit DB Packet Storm

190444	5.4	警告 Network	Axesstel	-	Axesstel MU553S におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-13724	2017-10-10 16:02	2017-08-29	Show	GitHub Exploit DB Packet Storm

190445	9.8	緊急 Network	Axesstel	-	Axesstel MU553S デバイスにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2017-11351	2017-10-10 16:02	2017-08-29	Show	GitHub Exploit DB Packet Storm

190446	8.8	重要 Network	Axesstel	-	Axesstel MU553S デバイスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-11350	2017-10-10 16:02	2017-08-29	Show	GitHub Exploit DB Packet Storm

190447	9.8	緊急 Network	Apache Software Foundation	-	Apache Traffic Server における脆弱性	CWE-noinfo 情報不足	CVE-2015-5206	2017-10-10 16:01	2015-09-14	Show	GitHub Exploit DB Packet Storm

190448	9.8	緊急 Network	Apache Software Foundation	-	Apache Traffic Server における脆弱性	CWE-noinfo 情報不足	CVE-2015-5168	2017-10-10 16:01	2015-09-14	Show	GitHub Exploit DB Packet Storm

190449	6.1	警告 Network	Drupal Debian	-	Drupal におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2015-2749	2017-10-10 16:01	2015-03-18	Show	GitHub Exploit DB Packet Storm

190450	7.8	重要 Local	STDUtility	-	STDU Viewer におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-14579	2017-10-10 15:01	2017-09-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349181	-	phpmyadmin gentoo	phpmyadmin linux	Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zer…	NVD-CWE-Other	CVE-2004-1055	2017-07-11 10:30	2005-03-1	Show	GitHub Exploit DB Packet Storm

349182	-	mnogosearch	mnogosearch	Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages,…	NVD-CWE-Other	CVE-2004-1059	2017-07-11 10:30	2004-12-10	Show	GitHub Exploit DB Packet Storm

349183	-	mozilla	bugzilla	Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demons…	NVD-CWE-Other	CVE-2004-1061	2017-07-11 10:30	2005-01-4	Show	GitHub Exploit DB Packet Storm

349184	-	viewcvs	viewcvs	Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.	NVD-CWE-Other	CVE-2004-1062	2017-07-11 10:30	2004-12-28	Show	GitHub Exploit DB Packet Storm

349185	-	freebsd	freebsd	The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a…	NVD-CWE-Other	CVE-2004-1066	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

349186	-	carnegie_mellon_university redhat ubuntu	cyrus_imap_server fedora_core ubuntu_linux	Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.	NVD-CWE-Other	CVE-2004-1067	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

349187	-	linux ubuntu	linux_kernel ubuntu_linux	Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_s…	NVD-CWE-Other	CVE-2004-1069	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

349188	-	zwiki	zwiki	Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which …	NVD-CWE-Other	CVE-2004-1075	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

349189	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other appl…	NVD-CWE-Other	CVE-2004-1081	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm

349190	-	apple	darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server	Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, w…	NVD-CWE-Other	CVE-2004-1084	2017-07-11 10:30	2004-12-2	Show	GitHub Exploit DB Packet Storm