Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
192811 7.8 重要
Local
Google - Android におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2014-9931 2017-06-15 16:55 2017-04-3 Show GitHub Exploit DB Packet Storm
192812 8.8 重要
Network
Apache Software Foundation - Apache CXF Fediz におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-7662 2017-06-15 16:18 2017-05-16 Show GitHub Exploit DB Packet Storm
192813 8.8 重要
Network
Apache Software Foundation - Apache CXF Fediz の複数のプラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-7661 2017-06-15 16:18 2017-05-16 Show GitHub Exploit DB Packet Storm
192814 7.8 重要
Local
LibRaw - LibRaw におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-6887 2017-06-15 16:18 2017-03-5 Show GitHub Exploit DB Packet Storm
192815 9.8 緊急
Network
LibRaw - LibRaw におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-6886 2017-06-15 16:18 2017-03-5 Show GitHub Exploit DB Packet Storm
192816 5.5 警告
Local
GNU Project - GNU Binutils の readelf.c の print_symbol_for_build_attribute 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2017-9044 2017-06-15 15:44 2017-05-12 Show GitHub Exploit DB Packet Storm
192817 7.8 重要
Local
GNU Project - GNU Binutils の readelf.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-9043 2017-06-15 15:44 2017-04-21 Show GitHub Exploit DB Packet Storm
192818 6.1 警告
Network
Invision Power Services, Inc - Invision Power Services Community Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-8897 2017-06-15 15:42 2017-05-9 Show GitHub Exploit DB Packet Storm
192819 5.9 警告
Network
OnePlus - OnePlus One および X デバイスにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-8851 2017-06-15 15:03 2017-05-11 Show GitHub Exploit DB Packet Storm
192820 5.9 警告
Network
OnePlus - 複数の OnePlus One デバイスにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-8850 2017-06-15 15:03 2017-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346961 - e107 e107 Incomplete blacklist vulnerability in usersettings.php in e107 0.7.20 and earlier allows remote attackers to conduct SQL injection attacks via the loginname parameter. NVD-CWE-Other
CVE-2010-2098 2012-12-13 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
346962 - e107 e107 Per: http://cwe.mitre.org/data/definitions/184.html 'CWE-184: Incomplete Blacklist' NVD-CWE-Other
CVE-2010-2098 2012-12-13 13:00 2010-05-28 Show GitHub Exploit DB Packet Storm
346963 - kerio personal_firewall
serverfirewall
The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting the PAGE_NOACCESS or PAGE_GUARD protection on the Page Env… NVD-CWE-Other
CVE-2005-3286 2012-12-13 11:43 2005-10-23 Show GitHub Exploit DB Packet Storm
346964 - freebsd freebsd sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize parameter, which allo… CWE-20
 Improper Input Validation 
CVE-2010-2020 2012-11-6 13:41 2010-05-29 Show GitHub Exploit DB Packet Storm
346965 - tiki tikiwiki_cms\/groupware TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulne… CWE-20
 Improper Input Validation 
CVE-2005-0200 2012-10-24 13:00 2005-05-2 Show GitHub Exploit DB Packet Storm
346966 - tiki tikiwiki_cms\/groupware Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CWE-79
Cross-site Scripting
CVE-2005-3283 2012-10-24 13:00 2005-10-23 Show GitHub Exploit DB Packet Storm
346967 - oracle database_server Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2010-0851 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
346968 - oracle database_server Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown v… NVD-CWE-noinfo
CVE-2010-0852 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
346969 - oracle fusion_middleware
database_server
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8, 9.2.0.8, and DV; and Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1; allows remote attackers to affe… NVD-CWE-noinfo
CVE-2010-0853 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm
346970 - oracle database_server Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INS… NVD-CWE-noinfo
CVE-2010-0854 2012-10-23 12:20 2010-04-14 Show GitHub Exploit DB Packet Storm