Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194531 8.8 重要
Network 		Apache Software Foundation - Apache CXF Fediz の複数のプラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-7661 2017-06-15 16:18 2017-05-16 Show GitHub Exploit DB Packet Storm
194532 7.8 重要
Local 		LibRaw - LibRaw におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-6887 2017-06-15 16:18 2017-03-5 Show GitHub Exploit DB Packet Storm
194533 9.8 緊急
Network 		LibRaw - LibRaw におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2017-6886 2017-06-15 16:18 2017-03-5 Show GitHub Exploit DB Packet Storm
194534 5.5 警告
Local 		GNU Project - GNU Binutils の readelf.c の print_symbol_for_build_attribute 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2017-9044 2017-06-15 15:44 2017-05-12 Show GitHub Exploit DB Packet Storm
194535 7.8 重要
Local 		GNU Project - GNU Binutils の readelf.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-9043 2017-06-15 15:44 2017-04-21 Show GitHub Exploit DB Packet Storm
194536 6.1 警告
Network 		Invision Power Services, Inc - Invision Power Services Community Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2017-8897 2017-06-15 15:42 2017-05-9 Show GitHub Exploit DB Packet Storm
194537 5.9 警告
Network 		OnePlus - OnePlus One および X デバイスにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-8851 2017-06-15 15:03 2017-05-11 Show GitHub Exploit DB Packet Storm
194538 5.9 警告
Network 		OnePlus - 複数の OnePlus One デバイスにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-8850 2017-06-15 15:03 2017-05-11 Show GitHub Exploit DB Packet Storm
194539 5.9 警告
Network 		OnePlus - 複数の OnePlus One デバイスにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-5948 2017-06-15 15:03 2017-05-11 Show GitHub Exploit DB Packet Storm
194540 7.5 重要
Network 		OnePlus - OnePlus 3T などのデバイスにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-10370 2017-06-15 15:03 2016-07-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346351 - best_software
saleslogix_corporation 		saleslogix slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie. NVD-CWE-Other
CVE-2004-1606 2017-07-11 10:31 2004-10-18 Show GitHub Exploit DB Packet Storm
346352 - best_software
saleslogix_corporation 		saleslogix slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error mes… NVD-CWE-Other
CVE-2004-1607 2017-07-11 10:31 2004-10-18 Show GitHub Exploit DB Packet Storm
346353 - best_software
saleslogix_corporation 		saleslogix SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation. NVD-CWE-Other
CVE-2004-1608 2017-07-11 10:31 2004-10-18 Show GitHub Exploit DB Packet Storm
346354 - best_software
saleslogix_corporation 		saleslogix SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access. NVD-CWE-Other
CVE-2004-1609 2017-07-11 10:31 2004-10-18 Show GitHub Exploit DB Packet Storm
346355 - best_software
saleslogix_corporation 		saleslogix SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the s… NVD-CWE-Other
CVE-2004-1611 2017-07-11 10:31 2004-10-18 Show GitHub Exploit DB Packet Storm
346356 - saleslogix_corporation saleslogix Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request. NVD-CWE-Other
CVE-2004-1612 2017-07-11 10:31 2004-10-18 Show GitHub Exploit DB Packet Storm
346357 - links links Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangl… NVD-CWE-Other
CVE-2004-1616 2017-07-11 10:31 2004-10-18 Show GitHub Exploit DB Packet Storm
346358 - vypress tonecast Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream. NVD-CWE-Other
CVE-2004-1618 2017-07-11 10:31 2004-10-19 Show GitHub Exploit DB Packet Storm
346359 - akella privateers_bounty_age_of_sail_ii Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname. NVD-CWE-Other
CVE-2004-1619 2017-07-11 10:31 2004-10-20 Show GitHub Exploit DB Packet Storm
346360 - s9y serendipity CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (… NVD-CWE-Other
CVE-2004-1620 2017-07-11 10:31 2004-10-21 Show GitHub Exploit DB Packet Storm