Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190921 9.8 緊急
Network 		RARLAB - UnRAR におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-12942 2017-09-11 17:03 2017-08-15 Show GitHub Exploit DB Packet Storm
190922 9.8 緊急
Network 		RARLAB - UnRAR における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-12941 2017-09-11 17:03 2017-08-15 Show GitHub Exploit DB Packet Storm
190923 9.8 緊急
Network 		RARLAB - UnRAR における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2017-12940 2017-09-11 17:03 2017-08-15 Show GitHub Exploit DB Packet Storm
190924 9.8 緊急
Network 		PostgreSQL.org - PostgreSQL における認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2017-7546 2017-09-11 15:50 2017-08-10 Show GitHub Exploit DB Packet Storm
190925 4.9 警告
Network 		シスコシステムズ - Cisco Elastic Services Controller における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-6777 2017-09-11 15:45 2017-08-16 Show GitHub Exploit DB Packet Storm
190926 4.3 警告
Network 		シスコシステムズ - Cisco Elastic Services Controller における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-6772 2017-09-11 15:45 2017-08-16 Show GitHub Exploit DB Packet Storm
190927 7.5 重要
Network 		シスコシステムズ - Cisco Ultra Services Framework における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-6771 2017-09-11 15:45 2017-08-16 Show GitHub Exploit DB Packet Storm
190928 7.8 重要
Local 		シスコシステムズ - Cisco Application Policy Infrastructure Controller における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-6768 2017-09-11 15:45 2017-08-16 Show GitHub Exploit DB Packet Storm
190929 7.1 重要
Network 		シスコシステムズ - Cisco Application Policy Infrastructure Controller における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-6767 2017-09-11 15:45 2017-08-16 Show GitHub Exploit DB Packet Storm
190930 8.1 重要
Network 		Google - Linux Kernel を使用している CAF リリースの Android のすべての Qualcomm 製品における競合状態に関する脆弱性 CWE-362
CWE-416
CVE-2017-9685 2017-09-11 15:32 2017-08-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1061 8.4 HIGH
Local 		- - Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can… CWE-121
Stack-based Buffer Overflow 		CVE-2018-25322 2026-05-19 02:29 2026-05-17 Show GitHub Exploit DB Packet Storm
1062 8.4 HIGH
Local 		- - Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payl… CWE-120
Classic Buffer Overflow 		CVE-2018-25323 2026-05-19 02:29 2026-05-17 Show GitHub Exploit DB Packet Storm
1063 9.1 CRITICAL
Network 		dovecot
open-xchange 		dovecot When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP … CWE-235
 Improper Handling of Extra Parameters 		CVE-2026-27851 2026-05-19 02:29 2026-05-12 Show GitHub Exploit DB Packet Storm
1064 6.1 MEDIUM
Network 		- - Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Vvveb CMS com… CWE-79
Cross-site Scripting 		CVE-2026-44366 2026-05-19 02:28 2026-05-16 Show GitHub Exploit DB Packet Storm
1065 - - - Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, there is an unauthenticated reflected cross-site scripting (XSS) issue in the… CWE-79
Cross-site Scripting 		CVE-2026-45622 2026-05-19 02:28 2026-05-16 Show GitHub Exploit DB Packet Storm
1066 - - - Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, there is an authenticated SQL injection issue in the frontend user order hist… CWE-89
SQL Injection 		CVE-2026-45800 2026-05-19 02:28 2026-05-16 Show GitHub Exploit DB Packet Storm
1067 7.5 HIGH
Network 		- - Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitrary files by submitting unescaped filenames through the delete_export_file AJAX … CWE-22
Path Traversal 		CVE-2018-25325 2026-05-19 02:28 2026-05-17 Show GitHub Exploit DB Packet Storm
1068 5.3 MEDIUM
Network 		- - Joomla! Component Js Jobs 1.2.0 contains a cross-site request forgery vulnerability that allows attackers to perform state-changing actions without token validation. Attackers can craft malicious HTM… CWE-352
 Origin Validation Error 		CVE-2018-25327 2026-05-19 02:28 2026-05-17 Show GitHub Exploit DB Packet Storm
1069 8.2 HIGH
Network 		- - Joomla! extension EkRishta 2.10 contains persistent cross-site scripting and SQL injection vulnerabilities that allow attackers to inject malicious code through profile fields and POST parameters. At… CWE-89
SQL Injection 		CVE-2018-25330 2026-05-19 02:28 2026-05-17 Show GitHub Exploit DB Packet Storm
1070 5.3 MEDIUM
Network 		- - Joomla jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HT… CWE-352
 Origin Validation Error 		CVE-2018-25336 2026-05-19 02:28 2026-05-17 Show GitHub Exploit DB Packet Storm