Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
196591	5.5	警告 Local	Apache Software Foundation	-	Apache POI におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2017-5644	2017-04-26 11:59	2017-03-20	Show	GitHub Exploit DB Packet Storm

196592	8.8	重要 Network	Firebird Project	-	Firebird の UDF サブシステムにおけるコードを実行される脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-6369	2017-04-26 11:59	2017-02-1	Show	GitHub Exploit DB Packet Storm

196593	8.8	重要 Network	AlienVault NfSen	-	複数の AlienVault 製品および NfSen における特権付きコンテキスト内で任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-6971	2017-04-26 10:48	2017-01-24	Show	GitHub Exploit DB Packet Storm

196594	8.4	重要 Local	AlienVault NfSen	-	複数の AlienVault 製品および NfSen における特権付きコンテキスト内で任意のコードを実行される脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-6970	2017-04-26 10:48	2017-01-24	Show	GitHub Exploit DB Packet Storm

196595	7.8	重要 Local	アップル	-	複数の Apple 製品の IOHIDFamily におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-4650	2017-04-26 10:46	2016-05-16	Show	GitHub Exploit DB Packet Storm

196596	8.8	重要 Network	ネットギア	-	NETGEAR DGN2200 ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-6366	2017-04-26 10:43	2017-02-28	Show	GitHub Exploit DB Packet Storm

196597	7.8	重要 Local	ioquake3	-	ioquake3 におけるセキュリティ機能に関する脆弱性	CWE-254 セキュリティ機能	CVE-2017-6903	2017-04-26 10:42	2017-03-14	Show	GitHub Exploit DB Packet Storm

196598	7.5	重要 Network	シスコシステムズ	-	Cisco IOS XE におけるリソース管理に関する脆弱性	CWE-399 リソース管理の問題	CVE-2017-3856	2017-04-25 18:20	2017-03-22	Show	GitHub Exploit DB Packet Storm

196599	9.8	緊急 Network	シスコシステムズ	-	Cisco IOx におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-3853	2017-04-25 18:20	2017-03-22	Show	GitHub Exploit DB Packet Storm

196600	7.8	重要 Local	pngdefry project	-	pngdefry におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2017-7231	2017-04-25 18:19	2017-03-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346931	-	ibm	aix	Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.	NVD-CWE-Other	CVE-2004-1330	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

346932	-	debian gentoo	tetex-bin linux	The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.	NVD-CWE-Other	CVE-2004-1336	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346933	-	gnu conectiva ubuntu	realtime_linux_security_module linux ubuntu_linux	The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to g…	NVD-CWE-Other	CVE-2004-1337	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346934	-	oracle	database_server oracle9i	The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2004-1338	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346935	-	oracle	database_server oracle9i	SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the …	CWE-89 SQL Injection	CVE-2004-1339	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346936	-	debian	debian_linux	Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information.	NVD-CWE-Other	CVE-2004-1340	2017-07-11 10:30	2005-01-26	Show	GitHub Exploit DB Packet Storm

346937	-	roar_smith	info2www	Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www.	NVD-CWE-Other	CVE-2004-1341	2017-07-11 10:30	2005-04-19	Show	GitHub Exploit DB Packet Storm

346938	-	sun	java_system_web_proxy_server	Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNEC…	NVD-CWE-Other	CVE-2004-1350	2017-07-11 10:30	2004-10-30	Show	GitHub Exploit DB Packet Storm

346939	-	oracle	application_server collaboration_suite e-business_suite enterprise_manager enterprise_manager_database_control enterprise_manager_grid_control oracle10g oracle8i oracle9i	The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attacker…	NVD-CWE-Other	CVE-2004-1362	2017-07-11 10:30	2004-08-4	Show	GitHub Exploit DB Packet Storm

346940	-	oracle	application_server collaboration_suite e-business_suite enterprise_manager enterprise_manager_database_control enterprise_manager_grid_control oracle10g oracle8i oracle9i	Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.	NVD-CWE-Other	CVE-2004-1365	2017-07-11 10:30	2004-08-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed