Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196141 6.7 警告
Local 		Avira - 複数の Avira 製品における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-6417 2017-04-27 18:35 2017-03-21 Show GitHub Exploit DB Packet Storm
196142 6.7 警告
Local 		BitDefender - 複数の Bitdefender 製品における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-6186 2017-04-27 18:35 2017-03-21 Show GitHub Exploit DB Packet Storm
196143 6.7 警告
Local 		AVAST Software s.r.o. - 複数の Avast 製品における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5567 2017-04-27 18:34 2017-03-22 Show GitHub Exploit DB Packet Storm
196144 6.7 警告
Local 		AVG Technologies - 複数の AVG 製品における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5566 2017-04-27 18:34 2017-03-21 Show GitHub Exploit DB Packet Storm
196145 6.7 警告
Local 		トレンドマイクロ - 複数の Trend Micro 製品における認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5565 2017-04-27 18:33 2017-03-21 Show GitHub Exploit DB Packet Storm
196146 5.8 警告
Network 		OpenStack - OpenStack Glance におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2017-7200 2017-04-27 18:32 2017-03-15 Show GitHub Exploit DB Packet Storm
196147 7 重要
Local 		S-nail project - S-nail の setuid root helper バイナリにおけるディレクトリトラバーサルの脆弱性 CWE-22
CWE-362
CVE-2017-5899 2017-04-27 18:20 2017-01-27 Show GitHub Exploit DB Packet Storm
196148 7.8 重要
Local 		Debian
Canonical
Apache Software Foundation		 - Debian および Ubuntu の tomcat パッケージにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9775 2017-04-27 18:16 2016-12-18 Show GitHub Exploit DB Packet Storm
196149 7.8 重要
Local 		Debian
Canonical
Apache Software Foundation		 - Debian および Ubuntu の tomcat パッケージにおける重要な情報を取得される脆弱性 CWE-59
リンク解釈の問題 		CVE-2016-9774 2017-04-27 18:16 2016-12-18 Show GitHub Exploit DB Packet Storm
196150 9.8 緊急
Network 		Irssi - Irssi の netjoin 処理におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2017-7191 2017-04-27 17:04 2017-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346991 - phpkit phpkit Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to login/member.php or (2) im_receiver parameter to login/… NVD-CWE-Other
CVE-2005-2683 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm
346992 - ibm lotus_notes IBM Lotus Notes does not properly restrict access to password hashes in the Notes Address Book (NAB), which allows remote attackers to obtain sensitive information via the (1) password digest field i… NVD-CWE-Other
CVE-2005-2696 2016-10-18 12:29 2005-08-27 Show GitHub Exploit DB Packet Storm
346993 - mybulletinboard mybulletinboard SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this is… NVD-CWE-Other
CVE-2005-2697 2016-10-18 12:29 2005-08-27 Show GitHub Exploit DB Packet Storm
346994 - phpkit phpkit Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ dire… NVD-CWE-Other
CVE-2005-2699 2016-10-18 12:29 2005-08-27 Show GitHub Exploit DB Packet Storm
346995 - mplayer mplayer Buffer overflow in ad_pcm.c in MPlayer 1.0pre7 and earlier allows remote attackers to execute arbitrary code via crafted PCM audio data, as demonstrated using a video file with an audio header contai… NVD-CWE-Other
CVE-2005-2718 2016-10-18 12:29 2005-08-30 Show GitHub Exploit DB Packet Storm
346996 - foojan php_weblog Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which rev… NVD-CWE-Other
CVE-2005-2722 2016-10-18 12:29 2005-08-30 Show GitHub Exploit DB Packet Storm
346997 - astaro security_linux Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfe_download parameter t… NVD-CWE-Other
CVE-2005-2731 2016-10-18 12:29 2005-08-30 Show GitHub Exploit DB Packet Storm
346998 - awstats awstats AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the config parameter, which reveals the path in an error message. NVD-CWE-Other
CVE-2005-2732 2016-10-18 12:29 2005-08-30 Show GitHub Exploit DB Packet Storm
346999 - flatnuke flatnuke FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via a direct request to structure.php. NVD-CWE-Other
CVE-2005-2537 2016-10-18 12:28 2005-08-10 Show GitHub Exploit DB Packet Storm
347000 - flatnuke flatnuke FlatNuke 2.5.5 and possibly earlier versions allows remote attackers to obtain sensitive information via (1) a null byte or (2) an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1 in the mod p… NVD-CWE-Other
CVE-2005-2538 2016-10-18 12:28 2005-08-10 Show GitHub Exploit DB Packet Storm