Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196681 7.5 重要
Network 		シスコシステムズ - Cisco ASR 920 シリーズアグリゲーションサービスルータ上で稼動する Cisco IOS XE における書式文字列に関する脆弱性 CWE-134
書式文字列の問題 		CVE-2017-3859 2017-04-24 19:25 2017-03-22 Show GitHub Exploit DB Packet Storm
196682 8.8 重要
Network 		シスコシステムズ - Cisco IOS XE ソフトウェアにおける不適切な入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-3858 2017-04-24 19:25 2017-03-22 Show GitHub Exploit DB Packet Storm
196683 8.1 重要
Network 		シスコシステムズ - Cisco IOx における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-3852 2017-04-24 19:25 2017-03-22 Show GitHub Exploit DB Packet Storm
196684 7.5 重要
Network 		シスコシステムズ - Cisco IOx におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2017-3851 2017-04-24 19:25 2017-03-22 Show GitHub Exploit DB Packet Storm
196685 5.9 警告
Network 		シスコシステムズ - Cisco IOS ソフトウェアおよび Cisco IOS XE ソフトウェアにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2017-3850 2017-04-24 19:25 2017-03-20 Show GitHub Exploit DB Packet Storm
196686 9.8 緊急
Network 		シスコシステムズ - Cisco Mobility Express 1800 シリーズアクセスポイントのソフトウェアにおける認可・権限・アクセス制御に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-3831 2017-04-24 19:25 2017-03-15 Show GitHub Exploit DB Packet Storm
196687 9.8 緊急
Network 		Artifex Software - Artifex Software, Inc. MuJS の js_stackoverflow 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-10133 2017-04-24 18:26 2016-12-1 Show GitHub Exploit DB Packet Storm
196688 7.5 重要
Network 		Artifex Software
Fedora Project		 - Artifex Software, Inc. MuJS の regexp.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-10132 2017-04-24 18:26 2016-12-3 Show GitHub Exploit DB Packet Storm
196689 7.8 重要
Local 		Firejail project - Firejail における root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5207 2017-04-24 18:15 2017-01-7 Show GitHub Exploit DB Packet Storm
196690 9 緊急
Network 		Firejail project - Firejail における seccomp ベースのサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-5206 2017-04-24 18:15 2017-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346931 - ibm aix Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username. NVD-CWE-Other
CVE-2004-1330 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
346932 - debian
gentoo 		tetex-bin
linux 		The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2004-1336 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
346933 - gnu
conectiva
ubuntu 		realtime_linux_security_module
linux
ubuntu_linux 		The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to g… NVD-CWE-Other
CVE-2004-1337 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
346934 - oracle database_server
oracle9i 		The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-1338 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
346935 - oracle database_server
oracle9i 		SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the … CWE-89
SQL Injection 		CVE-2004-1339 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
346936 - debian debian_linux Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information. NVD-CWE-Other
CVE-2004-1340 2017-07-11 10:30 2005-01-26 Show GitHub Exploit DB Packet Storm
346937 - roar_smith info2www Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www. NVD-CWE-Other
CVE-2004-1341 2017-07-11 10:30 2005-04-19 Show GitHub Exploit DB Packet Storm
346938 - sun java_system_web_proxy_server Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNEC… NVD-CWE-Other
CVE-2004-1350 2017-07-11 10:30 2004-10-30 Show GitHub Exploit DB Packet Storm
346939 - oracle application_server
collaboration_suite
e-business_suite
enterprise_manager
enterprise_manager_database_control
enterprise_manager_grid_control
oracle10g
oracle8i
oracle9i 		The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attacker… NVD-CWE-Other
CVE-2004-1362 2017-07-11 10:30 2004-08-4 Show GitHub Exploit DB Packet Storm
346940 - oracle application_server
collaboration_suite
e-business_suite
enterprise_manager
enterprise_manager_database_control
enterprise_manager_grid_control
oracle10g
oracle8i
oracle9i 		Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user. NVD-CWE-Other
CVE-2004-1365 2017-07-11 10:30 2004-08-4 Show GitHub Exploit DB Packet Storm