Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193121 7.8 重要
Local 		FontForge project - FontForge の PSCharStringToSplines におけるヒープベースのバッファオーバーリードの脆弱性 CWE-119
バッファエラー 		CVE-2017-11568 2017-08-15 17:28 2017-07-31 Show GitHub Exploit DB Packet Storm
193122 7.5 重要
Network 		Ansible - Ansible における情報を公開される脆弱性 CWE-200
情報漏えい 		CVE-2017-7473 2017-08-15 17:25 2017-03-11 Show GitHub Exploit DB Packet Storm
193123 6.6 警告
Network 		Cloud Foundry Foundation - 複数の Cloud Foundry 製品における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-8032 2017-08-15 17:20 2017-06-12 Show GitHub Exploit DB Packet Storm
193124 7.8 重要
Local 		Linux - Linux Kernel における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2017-1000363 2017-08-15 17:06 2017-05-23 Show GitHub Exploit DB Packet Storm
193125 9.8 緊急
Network 		Rootkit Hunter project - rkhunter におけるチャネルおよびパスのエラーに関する脆弱性 CWE-417
チャネルおよびパスのエラー 		CVE-2017-7480 2017-08-15 16:58 2017-06-29 Show GitHub Exploit DB Packet Storm
193126 6.6 警告
Network 		Cloud Foundry Foundation - Cloud Foundry の Cloud Controller および Router における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-8034 2017-08-15 16:56 2017-07-13 Show GitHub Exploit DB Packet Storm
193127 4.8 警告
Adjacent 		Lenovo - Windows および Android 用 Lenovo Connect2 における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2017-3742 2017-08-15 16:56 2017-07-13 Show GitHub Exploit DB Packet Storm
193128 7.5 重要
Network 		レッドハット
Debian
Canonical
Fedora Project
NTP Project		 - NTP の ntpd の ntp_openssl.m4 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5195 2017-08-15 16:56 2015-08-18 Show GitHub Exploit DB Packet Storm
193129 7.5 重要
Network 		Canonical
NTP Project
Debian
SUSE
Fedora Project
レッドハット		 - NTP の ntpd の ntp_parser.y の log_config_command 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5194 2017-08-15 16:56 2015-08-18 Show GitHub Exploit DB Packet Storm
193130 7.5 重要
Network 		Cygwin - Cygwin の wcsxfrm/wcsxfrm_l におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-7523 2017-08-15 16:53 2017-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345501 - uniformserver uniformserver Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication of administrators for requests that change passwords via (1)… CWE-352
 Origin Validation Error 		CVE-2010-2113 2017-08-17 10:32 2010-05-29 Show GitHub Exploit DB Packet Storm
345502 - speedtech storm Multiple cross-site scripting (XSS) vulnerabilities in the Storm module 5.x and 6.x before 6.x-1.33 for Drupal allow remote authenticated users, with certain module privileges, to inject arbitrary we… CWE-79
Cross-site Scripting 		CVE-2010-2123 2017-08-17 10:32 2010-06-2 Show GitHub Exploit DB Packet Storm
345503 - bartels-schoene conpresso SQL injection vulnerability in firma.php in Bartels Schone ConPresso 4.0.7 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2010-2124 2017-08-17 10:32 2010-06-2 Show GitHub Exploit DB Packet Storm
345504 - systemseed rotor Multiple cross-site scripting (XSS) vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit… CWE-79
Cross-site Scripting 		CVE-2010-2125 2017-08-17 10:32 2010-06-2 Show GitHub Exploit DB Packet Storm
345505 - snipegallery snipe_gallery Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfg_admin_path parameter to (1) index.php, (2) view.php… CWE-94
Code Injection 		CVE-2010-2126 2017-08-17 10:32 2010-06-2 Show GitHub Exploit DB Packet Storm
345506 - jv2design jv2_folder_gallery PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the lang_file parameter. CWE-94
Code Injection 		CVE-2010-2127 2017-08-17 10:32 2010-06-2 Show GitHub Exploit DB Packet Storm
345507 - harmistechnology com_jequoteform Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) component 1.0b1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via… CWE-22
Path Traversal 		CVE-2010-2128 2017-08-17 10:32 2010-06-2 Show GitHub Exploit DB Packet Storm
345508 - harmistechnology com_jeajaxeventcalendar Directory traversal vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.1 and 1.0.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in t… CWE-22
Path Traversal 		CVE-2010-2129 2017-08-17 10:32 2010-06-2 Show GitHub Exploit DB Packet Storm
345509 - danny_ho oes Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1 beta allow remote attackers to execute arbitrary PHP code via a URL in the CONF_INCLUDE_PATH parameter to (1) for… CWE-94
Code Injection 		CVE-2010-2132 2017-08-17 10:32 2010-06-3 Show GitHub Exploit DB Packet Storm
345510 - mylittleforum my_little_forum SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942. CWE-89
SQL Injection 		CVE-2010-2133 2017-08-17 10:32 2010-06-3 Show GitHub Exploit DB Packet Storm