Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
194481 5.5 警告
Local
Kodi - Kodi の Zip Extraction built-in 関数におけるディレクトリトラバーサルの脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-8314 2017-06-26 11:40 2017-04-28 Show GitHub Exploit DB Packet Storm
194482 7.8 重要
Local
Huawei - 複数の Huawei P7 のソフトウェアの GPU ドライバにおける任意のカーネルメモリ領域に読み書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8089 2017-06-26 11:40 2015-11-3 Show GitHub Exploit DB Packet Storm
194483 8.1 重要
Network
Marko Kreen - PgBouncer における auth_user としてのログインアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2015-6817 2017-06-26 11:40 2015-09-3 Show GitHub Exploit DB Packet Storm
194484 7.5 重要
Network
Teradata Corporation - Teradata Gateway および Teradata Express におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-5401 2017-06-26 11:40 2015-06-23 Show GitHub Exploit DB Packet Storm
194485 7.8 重要
Local
マイクロソフト - 複数の Microsoft Windows 製品の Windows Hyper-V におけるゲスト OS 上で権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-0193 2017-06-26 11:28 2017-06-13 Show GitHub Exploit DB Packet Storm
194486 7.5 重要
Network
The PHP Group
Oniguruma project
Ruby-lang.org
- Ruby の Oniguruma-mod および PHP の mbstring で使用される Oniguruma における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-9229 2017-06-26 10:55 2017-05-24 Show GitHub Exploit DB Packet Storm
194487 9.8 緊急
Network
The PHP Group
Oniguruma project
Ruby-lang.org
- Ruby の Oniguruma-mod および PHP の mbstring で使用される Oniguruma における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-9228 2017-06-26 10:55 2017-05-24 Show GitHub Exploit DB Packet Storm
194488 9.8 緊急
Network
The PHP Group
Oniguruma project
Ruby-lang.org
- Ruby の Oniguruma-mod および PHP の mbstring で使用される Oniguruma における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-9226 2017-06-26 10:55 2017-05-18 Show GitHub Exploit DB Packet Storm
194489 9.8 緊急
Network
The PHP Group
Oniguruma project
Ruby-lang.org
- Ruby の Oniguruma-mod および PHP の mbstring で使用される Oniguruma における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-9225 2017-06-26 10:55 2017-05-22 Show GitHub Exploit DB Packet Storm
194490 9.8 緊急
Network
The PHP Group
Oniguruma project
Ruby-lang.org
- Ruby の Oniguruma-mod および PHP の mbstring で使用される Oniguruma における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2017-9227 2017-06-26 10:55 2017-05-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346171 - kerio winroute_firewall Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to cause a denial of service (crash) via certain RTSP streams. NVD-CWE-Other
CVE-2005-4425 2017-07-20 10:29 2005-12-20 Show GitHub Exploit DB Packet Storm
346172 - yabb yabb Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed … NVD-CWE-Other
CVE-2005-4426 2017-07-20 10:29 2005-12-20 Show GitHub Exploit DB Packet Storm
346173 - playsms playsms Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web script or HTML via the err parameter. NVD-CWE-Other
CVE-2005-4432 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm
346174 - abledesign abledesign Cross-site scripting (XSS) vulnerability in AbleDesign ReSearch 2.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unk… NVD-CWE-Other
CVE-2005-4434 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm
346175 - abledesign d-man Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this informa… NVD-CWE-Other
CVE-2005-4435 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm
346176 - elog elogd Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parame… NVD-CWE-Other
CVE-2005-4439 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm
346177 - flatnuke flatnuke FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by … NVD-CWE-Other
CVE-2005-4448 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm
346178 - flatnuke flatnuke verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter… NVD-CWE-Other
CVE-2005-4449 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm
346179 - information_call_center information_call_center Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and… NVD-CWE-Other
CVE-2005-4452 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm
346180 - livejournal livejournal Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) att… NVD-CWE-Other
CVE-2005-4454 2017-07-20 10:29 2005-12-21 Show GitHub Exploit DB Packet Storm