Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
191641 7.8 重要
Local 		オラクル - Oracle Sun Systems Products Suite の Solaris コンポーネントにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-3629 2017-07-13 17:47 2017-06-19 Show GitHub Exploit DB Packet Storm
191642 9.8 緊急
Network 		IdeaBlade - IdeaBlade Breeze Breeze.Server.NET における任意のコードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2017-9424 2017-07-13 17:17 2017-06-1 Show GitHub Exploit DB Packet Storm
191643 5.3 警告
Network 		Belden Inc. - Belden Hirschmann GECKO Lite Managed スイッチにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-6040 2017-07-13 17:12 2017-01-26 Show GitHub Exploit DB Packet Storm
191644 7.1 重要
Network 		Belden Inc. - Belden Hirschmann GECKO Lite Managed スイッチにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-6038 2017-07-13 17:12 2017-01-26 Show GitHub Exploit DB Packet Storm
191645 6.5 警告
Network 		Belden Inc. - Belden Hirschmann GECKO Lite Managed スイッチにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2017-6036 2017-07-13 17:12 2017-01-26 Show GitHub Exploit DB Packet Storm
191646 7.5 重要
Network 		LibTIFF - LibTIFF における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-10688 2017-07-13 17:12 2017-06-30 Show GitHub Exploit DB Packet Storm
191647 9.8 緊急
Network 		GNU Project - ncurses の fmt_entry 関数におけるフォーマットストリングの脆弱性 CWE-20
不適切な入力確認 		CVE-2017-10685 2017-07-13 17:12 2017-06-24 Show GitHub Exploit DB Packet Storm
191648 9.8 緊急
Network 		GNU Project - ncurses の fmt_entry 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-10684 2017-07-13 17:12 2017-06-24 Show GitHub Exploit DB Packet Storm
191649 5.5 警告
Local 		AudioCoding - Freeware Advanced Audio Decoder 2 の common/mp4ff/mp4atom.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2017-9257 2017-07-13 16:46 2017-06-27 Show GitHub Exploit DB Packet Storm
191650 5.5 警告
Local 		AudioCoding - Freeware Advanced Audio Decoder 2 の common/mp4ff/mp4atom.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2017-9256 2017-07-13 16:46 2017-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348121 - phpkobo short_url Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal … CWE-22
Path Traversal 		CVE-2010-1061 2010-03-24 23:30 2010-03-24 Show GitHub Exploit DB Packet Storm
348122 - tejimaya openpne The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypas… CWE-287
Improper Authentication 		CVE-2010-1040 2010-03-24 13:00 2010-03-24 Show GitHub Exploit DB Packet Storm
348123 - phpkobo address_book_script Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local fi… CWE-22
Path Traversal 		CVE-2010-1059 2010-03-24 13:00 2010-03-24 Show GitHub Exploit DB Packet Storm
348124 - phpkobo short_url Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a … CWE-22
Path Traversal 		CVE-2010-1060 2010-03-24 13:00 2010-03-24 Show GitHub Exploit DB Packet Storm
348125 - phpkobo free_real_estate_contact_form_script Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via … CWE-22
Path Traversal 		CVE-2010-1063 2010-03-24 13:00 2010-03-24 Show GitHub Exploit DB Packet Storm
348126 - entrylevelcms el_cms SQL injection vulnerability in index.php in Entry Level CMS (EL CMS) allows remote attackers to execute arbitrary SQL commands via the subj parameter. CWE-89
SQL Injection 		CVE-2010-1075 2010-03-24 13:00 2010-03-24 Show GitHub Exploit DB Packet Storm
348127 - ryan_marshall rostermain Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) userid (username) and (2) password parameters. CWE-89
SQL Injection 		CVE-2010-1046 2010-03-23 22:53 2010-03-23 Show GitHub Exploit DB Packet Storm
348128 - jaxcms jaxcms Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter. CWE-22
Path Traversal 		CVE-2010-1043 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
348129 - design-cars com_productbook SQL injection vulnerability in the Productbook (com_productbook) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index… CWE-89
SQL Injection 		CVE-2010-1045 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm
348130 - uiga business_portal Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter (aka the Comment Box) i… CWE-79
Cross-site Scripting 		CVE-2010-1048 2010-03-23 13:00 2010-03-23 Show GitHub Exploit DB Packet Storm