Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
193671 9.8 緊急
Network 		NetApp - NetApp OnCommand Insight の Data Warehouse コンポーネントにおける管理アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5600 2017-02-21 11:41 2017-01-31 Show GitHub Exploit DB Packet Storm
193672 6.3 警告
Network 		NetApp - NetApp Snap Creator Framework におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-5372 2017-02-21 11:40 2016-06-22 Show GitHub Exploit DB Packet Storm
193673 7.5 重要
Network 		TalariaX Pte Ltd - SendQuick Entera および Avera デバイスのアプリケーションにおけるシステムをシャットダウンされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-5136 2017-02-21 11:09 2017-02-5 Show GitHub Exploit DB Packet Storm
193674 5.4 警告
Network 		シスコシステムズ - Cisco Prime Service Catalog の Web フレームワークにおけるシステムにログインしているユーザに対して URL リダイレクト攻撃を実行される脆弱性 CWE-601
オープンリダイレクト 		CVE-2017-3810 2017-02-21 11:07 2017-02-1 Show GitHub Exploit DB Packet Storm
193675 6.1 警告
Network 		Plone Foundation - Plone の Zope ZMI の検索機能の manage_findResult コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-7147 2017-02-21 11:05 2016-09-5 Show GitHub Exploit DB Packet Storm
193676 9.1 緊急
Network 		SaltStack - Salt における同一の ID を持つ minion を読まれる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-9639 2017-02-20 18:16 2016-11-28 Show GitHub Exploit DB Packet Storm
193677 5.2 警告
Adjacent 		Tenable, Inc. - Nessus におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-9260 2017-02-20 17:43 2017-01-24 Show GitHub Exploit DB Packet Storm
193678 7.5 重要
Network 		日本電気
Apache Software Foundation		 - Apache HTTP Web Server の HTTP/2 プロトコルの処理にサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2016-8740 2017-02-20 17:39 2016-12-4 Show GitHub Exploit DB Packet Storm
193679 7.2 重要
Network 		iRZ Company - iRZ RUH2 におけるデータを変更される脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2016-2309 2017-02-20 17:10 2016-05-17 Show GitHub Exploit DB Packet Storm
193680 7.8 重要
Local 		Google - メディアサーバの libopus の silk/NLSF_stabilize.c における情報を公開される脆弱性 CWE-119
バッファエラー 		CVE-2017-0381 2017-02-20 16:38 2017-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294141 - scwiki scwiki PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the pathdot parameter. CWE-94
Code Injection 		CVE-2007-5843 2017-09-29 10:29 2007-11-7 Show GitHub Exploit DB Packet Storm
294142 - guppy guppy Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the selskin parameter to index.php. NO… CWE-22
Path Traversal 		CVE-2007-5844 2017-09-29 10:29 2007-11-7 Show GitHub Exploit DB Packet Storm
294143 - guppy guppy Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: … CWE-94
Code Injection 		CVE-2007-5845 2017-09-29 10:29 2007-11-7 Show GitHub Exploit DB Packet Storm
294144 - infuseum asp_message_board SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2007-5887 2017-09-29 10:29 2007-11-8 Show GitHub Exploit DB Packet Storm
294145 - mit kerberos_5 Use-after-free vulnerability in the gss_indicate_mechs function in lib/gssapi/mechglue/g_initialize.c in MIT Kerberos 5 (krb5) has unknown impact and attack vectors. NOTE: this might be the result o… CWE-399
 Resource Management Errors 		CVE-2007-5901 2017-09-29 10:29 2007-12-6 Show GitHub Exploit DB Packet Storm
294146 - mit kerberos_5 Information from Apple: http://docs.info.apple.com/article.html?artnum=307562 CWE-399
 Resource Management Errors 		CVE-2007-5901 2017-09-29 10:29 2007-12-6 Show GitHub Exploit DB Packet Storm
294147 - xensource_inc xen Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash). CWE-264
Permissions, Privileges, and Access Controls 		CVE-2007-5907 2017-09-29 10:29 2007-11-10 Show GitHub Exploit DB Packet Storm
294148 - viewpoint media_player Multiple stack-based buffer overflows in the AxMetaStream ActiveX control in AxMetaStream.dll 3.3.2.26 in Viewpoint Media Player 3.2 allow remote attackers to execute arbitrary code via a long string… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-5911 2017-09-29 10:29 2007-11-10 Show GitHub Exploit DB Packet Storm
294149 - jportal jportal_web_portal SQL injection vulnerability in mailer.php in jPORTAL 2 allows remote attackers to execute arbitrary SQL commands via the to parameter. CWE-89
SQL Injection 		CVE-2007-5912 2017-09-29 10:29 2007-11-10 Show GitHub Exploit DB Packet Storm
294150 - adobe shockwave_player Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the S… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2007-5941 2017-09-29 10:29 2007-11-14 Show GitHub Exploit DB Packet Storm