Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
195051	4.3	警告 Network	サイボウズ	-	サイボウズガルーンにおける情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2017-2093	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195052	5.4	警告 Network	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2092	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195053	4.3	警告 Network	サイボウズ	-	サイボウズガルーンの電話メモ機能におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-2091	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195054	6.3	警告 Network	サイボウズ	-	サイボウズガルーンにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-2090	2017-06-1 15:03	2017-02-20	Show	GitHub Exploit DB Packet Storm

195055	6.8	警告 Adjacent	バッファロー	-	WNC01WH における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2017-2152	2017-06-1 13:51	2017-04-21	Show	GitHub Exploit DB Packet Storm

195056	6.1	警告 Network	wpdevelop	-	WordPress 用プラグイン Booking Calendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2151	2017-06-1 13:51	2017-04-20	Show	GitHub Exploit DB Packet Storm

195057	5.8	警告 Network	wpdevelop	-	WordPress 用プラグイン Booking Calendar におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-2150	2017-06-1 13:51	2017-04-20	Show	GitHub Exploit DB Packet Storm

195058	4.3	警告 Adjacent	株式会社アイ・オー・データ機器	-	WN-AC1167GR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2148	2017-06-1 13:51	2017-04-14	Show	GitHub Exploit DB Packet Storm

195059	6.1	警告 Network	WP Statistics	-	WordPress 用プラグイン WP Statistics におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2147	2017-06-1 13:51	2017-04-13	Show	GitHub Exploit DB Packet Storm

195060	8.8	重要 Adjacent	株式会社アイ・オー・データ機器	-	WN-G300R3 におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-2142	2017-06-1 13:51	2017-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352951	-	wordpress	wordpress	Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.	NVD-CWE-Other	CVE-2005-2612	2008-09-6 05:52	2005-08-17	Show	GitHub Exploit DB Packet Storm

352952	-	crosscom_olicom	discuz	Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other mu…	NVD-CWE-Other	CVE-2005-2614	2008-09-6 05:52	2005-08-17	Show	GitHub Exploit DB Packet Storm

352953	-	eqdkp	eqdkp	Unknown vulnerability in session.php in EQdkp before 1.3.0 has unknown impact and attack vectors, possibly involving auto_login_id.	NVD-CWE-Other	CVE-2005-2615	2008-09-6 05:52	2005-08-17	Show	GitHub Exploit DB Packet Storm

352954	-	mutt	mutt	Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.	NVD-CWE-Other	CVE-2005-2642	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

352955	-	isemarket	jaguarcontrol	Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.	NVD-CWE-Other	CVE-2005-2644	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

352956	-	xerox	document_centre_265 document_centre_332 document_centre_340 document_centre_420 document_centre_490 document_centre_535 document_centre_555	Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.	NVD-CWE-Other	CVE-2005-2645	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

352957	-	xerox	document_centre_220 document_centre_230 document_centre_240 document_centre_255 document_centre_265 document_centre_332 document_centre_340 document_centre_420 document_centre…	Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or rea…	NVD-CWE-Other	CVE-2005-2646	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

352958	-	xerox	document_centre_265 document_centre_332 document_centre_340 document_centre_420 document_centre_490 document_centre_535 document_centre_555	Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitr…	NVD-CWE-Other	CVE-2005-2647	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

352959	-	emefa	emefa_guestbook	Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters.	NVD-CWE-Other	CVE-2005-2650	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

352960	-	maildrop	maildrop	lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.	NVD-CWE-Other	CVE-2005-2655	2008-09-6 05:52	2005-08-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed