Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
195551 5.9 警告
Network
Cloud Foundry Foundation - 複数の Cloud Foundry 製品における証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2016-5016 2017-05-26 16:27 2016-07-21 Show GitHub Exploit DB Packet Storm
195552 6.5 警告
Network
e107.org - e107 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-8098 2017-05-26 16:19 2017-03-3 Show GitHub Exploit DB Packet Storm
195553 5.5 警告
Local
Python Software Foundation - Pillow の j2k_encode_entry 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3076 2017-05-26 16:11 2016-03-29 Show GitHub Exploit DB Packet Storm
195554 8.8 重要
Network
アップル - Apple Safari で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-3438 2017-05-26 16:11 2011-09-13 Show GitHub Exploit DB Packet Storm
195555 9.8 緊急
Network
アップル - Windows 用 Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3428 2017-05-26 16:10 2011-09-13 Show GitHub Exploit DB Packet Storm
195556 5.9 警告
Network
Grandstream Networks - Android 用 Grandstream Wave アプリケーションの com.softphone.common パッケージにおける Grandstream プロビジョニングサーバを偽造される脆弱性 CWE-295
不正な証明書検証
CVE-2016-1519 2017-05-26 15:23 2016-03-18 Show GitHub Exploit DB Packet Storm
195557 8.1 重要
Network
Grandstream Networks - Android および Grandstream Video IP phone 用 Grandstream Wave アプリケーションにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-1518 2017-05-26 15:22 2016-03-17 Show GitHub Exploit DB Packet Storm
195558 7.8 重要
Local
マイクロソフト - 複数の Microsoft 製品におけるリモートコードを実行される脆弱性 CWE-19
データ処理
CVE-2017-0281 2017-05-26 14:54 2017-05-9 Show GitHub Exploit DB Packet Storm
195559 7.5 重要
Network
マイクロソフト - Microsoft .NET Framework における Enhanced Security Usage のタグ付けを回避される脆弱性 CWE-254
セキュリティ機能
CVE-2017-0248 2017-05-26 14:30 2017-05-9 Show GitHub Exploit DB Packet Storm
195560 7.8 重要
Local
マイクロソフト - 複数の Microsoft 製品におけるリモートでコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2017-0254 2017-05-26 14:26 2017-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352501 - samba samba Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. NVD-CWE-Other
CVE-1999-0182 2008-09-9 21:33 1997-09-30 Show GitHub Exploit DB Packet Storm
352502 - sun solaris In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. NVD-CWE-Other
CVE-1999-0186 2008-09-9 21:33 1998-10-1 Show GitHub Exploit DB Packet Storm
352503 - microsoft internet_information_server IIS newdsn.exe CGI script allows remote users to overwrite files. NVD-CWE-Other
CVE-1999-0191 2008-09-9 21:33 1997-09-1 Show GitHub Exploit DB Packet Storm
352504 - webgais_development_team webgais websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). NVD-CWE-Other
CVE-1999-0196 2008-09-9 21:33 1997-07-8 Show GitHub Exploit DB Packet Storm
352505 - vtiger vtiger_crm Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions … NVD-CWE-Other
CVE-2006-4617 2008-09-6 06:10 2006-09-7 Show GitHub Exploit DB Packet Storm
352506 - sage sage Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. S… NVD-CWE-Other
CVE-2006-4711 2008-09-6 06:10 2006-09-13 Show GitHub Exploit DB Packet Storm
352507 - e107 e107 Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, … NVD-CWE-Other
CVE-2006-4794 2008-09-6 06:10 2006-09-15 Show GitHub Exploit DB Packet Storm
352508 - xine xine-lib Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005… NVD-CWE-Other
CVE-2006-4799 2008-09-6 06:10 2006-09-15 Show GitHub Exploit DB Packet Storm
352509 - blojsom blojsom Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of … NVD-CWE-Other
CVE-2006-4830 2008-09-6 06:10 2006-09-16 Show GitHub Exploit DB Packet Storm
352510 - blojsom blojsom This vulnerability is addressed in the following product release: Blojsom, Blojsom, 2.31 NVD-CWE-Other
CVE-2006-4830 2008-09-6 06:10 2006-09-16 Show GitHub Exploit DB Packet Storm