Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
192741	5.4	警告 Network	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2092	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

192742	4.3	警告 Network	サイボウズ	-	サイボウズガルーンの電話メモ機能におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-2091	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

192743	6.3	警告 Network	サイボウズ	-	サイボウズガルーンにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-2090	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

192744	6.8	警告 Adjacent	バッファロー	-	WNC01WH における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2017-2152	2017-06-1 13:51	2017-04-21	Show	GitHub Exploit DB Packet Storm

192745	6.1	警告 Network	wpdevelop	-	WordPress 用プラグイン Booking Calendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2151	2017-06-1 13:51	2017-04-20	Show	GitHub Exploit DB Packet Storm

192746	5.8	警告 Network	wpdevelop	-	WordPress 用プラグイン Booking Calendar におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-2150	2017-06-1 13:51	2017-04-20	Show	GitHub Exploit DB Packet Storm

192747	4.3	警告 Adjacent	株式会社アイ・オー・データ機器	-	WN-AC1167GR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2148	2017-06-1 13:51	2017-04-14	Show	GitHub Exploit DB Packet Storm

192748	6.1	警告 Network	WP Statistics	-	WordPress 用プラグイン WP Statistics におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2147	2017-06-1 13:51	2017-04-13	Show	GitHub Exploit DB Packet Storm

192749	8.8	重要 Adjacent	株式会社アイ・オー・データ機器	-	WN-G300R3 におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-2142	2017-06-1 13:51	2017-04-10	Show	GitHub Exploit DB Packet Storm

192750	5	警告 Network	株式会社アイ・コン	-	風神ビュアーにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-2155	2017-06-1 13:40	2017-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351151	-	phrozensmoke	gyach_enhanced	Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service (crash) via conference packets with error messages.	NVD-CWE-noinfo CWE-20 Improper Input Validation	CVE-2004-2706	2008-09-5 13:00	2004-12-31	Show	GitHub Exploit DB Packet Storm

351152	-	ibm	aix	Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.	NVD-CWE-noinfo	CVE-1999-1589	2008-09-5 13:00	1999-12-31	Show	GitHub Exploit DB Packet Storm

351153	-	coxco_support	a-cart metacart midicart_asp midicart_asp_maxi midicart_asp_plus salescart-pro salescart-std	MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.	CWE-200 Information Exposure	CVE-2002-1432	2008-09-5 13:00	2003-04-11	Show	GitHub Exploit DB Packet Storm

351154	-	ikonboard	ikonboard	Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the UR…	CWE-79 Cross-site Scripting	CVE-2002-2230	2008-09-5 13:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

351155	-	-	-	The echo service is running.	NVD-CWE-Other	CVE-1999-0635	2007-07-13 13:00	1999-01-1	Show	GitHub Exploit DB Packet Storm

351156	-	-	-	This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System …	NVD-CWE-Other	CVE-1999-0635	2007-07-13 13:00	1999-01-1	Show	GitHub Exploit DB Packet Storm

351157	-	-	-	The Echo Service is an unsecured and obsolete protocol and it should be disabled. Historically it has been used to perform denial of service attacks.	NVD-CWE-Other	CVE-1999-0635	2007-07-13 13:00	1999-01-1	Show	GitHub Exploit DB Packet Storm

351158	-	-	-	Multiple vulnerabilities in multiple vendor implementations of the X.400 protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an X.400 message containi…	NVD-CWE-Other	CVE-2003-0565	2005-10-20 13:00	2003-12-1	Show	GitHub Exploit DB Packet Storm

351159	-	-	-	Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun.	NVD-CWE-Other	CVE-2000-0889	2005-10-20 13:00	2001-02-12	Show	GitHub Exploit DB Packet Storm

351160	-	-	-	Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters.	NVD-CWE-Other	CVE-2001-0291	2005-10-20 13:00	2001-05-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed