Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
196911	9.8	緊急 Network	DNN	-	DotNetNuke のインストールウィザードにおけるアプリケーションを再インストールされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-2794	2017-02-23 11:39	2015-05-26	Show	GitHub Exploit DB Packet Storm

196912	6.1	警告 Network	ZoneMinder	-	ZoneMinder における反射型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5367	2017-02-23 11:12	2017-02-5	Show	GitHub Exploit DB Packet Storm

196913	6.1	警告 Network	dotCMS	-	dotCMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5877	2017-02-23 10:55	2017-02-6	Show	GitHub Exploit DB Packet Storm

196914	5.4	警告 Network	dotCMS	-	dotCMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5875	2017-02-23 10:55	2017-02-6	Show	GitHub Exploit DB Packet Storm

196915	5.5	警告 Local	LibTIFF	-	LibTIFF の gif2tiff ツールの gif2tiff.c の readgifimage 関数におけるバッファオーバーフローの脆弱性	CWE-20 不適切な入力確認	CVE-2016-5102	2017-02-23 10:49	2016-09-5	Show	GitHub Exploit DB Packet Storm

196916	6.2	警告 Local	TalariaX Pte Ltd	-	SendQuick Entera および Avera デバイスにおける認証されていない SMS ログを要求される脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2017-5137	2017-02-22 18:12	2017-02-5	Show	GitHub Exploit DB Packet Storm

196917	9.8	緊急 Network	TalariaX Pte Ltd	-	SendQuick Entera および Avera デバイスにおける複数のコマンドを挿入される脆弱性	CWE-77 コマンドインジェクション	CVE-2016-10098	2017-02-22 18:12	2017-01-2	Show	GitHub Exploit DB Packet Storm

196918	5.8	警告 Network	シスコシステムズ	-	Cisco Firepower System Software における特定の Web コンテンツのブロック機能を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2017-3814	2017-02-22 17:27	2017-02-1	Show	GitHub Exploit DB Packet Storm

196919	5.8	警告 Network	シスコシステムズ	-	Cisco Firepower Management Center の Policy デプロイメントモジュールにおけるデプロイメントを制限される脆弱性	CWE-20 不適切な入力確認	CVE-2017-3809	2017-02-22 17:27	2017-02-1	Show	GitHub Exploit DB Packet Storm

196920	4.3	警告 Network	Google	-	Google Chrome の Blink におけるコンテンツセキュリティポリシーを回避される脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-5027	2017-02-22 16:59	2017-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349761	-	apple	mac_os_x mac_os_x_server	SecurityAgent in Apple Mac OS X 10.4.2, under certain circumstances, can cause the "Switch User..." button to appear even though the "Enable fast user switching" setting is disabled, which can allow …	NVD-CWE-Other	CVE-2005-2742	2008-09-6 05:52	2005-10-26	Show	GitHub Exploit DB Packet Storm

349762	-	apple	quicktime mac_os_x mac_os_x_server	The Java extensions for QuickTime 6.52 and earlier in Apple Mac OS X 10.3.9 allow untrusted applets to call arbitrary functions in system libraries, which allows remote attackers to execute arbitrary…	NVD-CWE-Other	CVE-2005-2743	2008-09-6 05:52	2005-10-26	Show	GitHub Exploit DB Packet Storm

349763	-	apple	mac_os_x mac_os_x_server	Mail.app in Mail for Apple Mac OS X 10.3.9, when using Kerberos 5 for SMTP authentication, can include uninitialized memory in a message, which might allow remote attackers to obtain sensitive inform…	NVD-CWE-Other	CVE-2005-2745	2008-09-6 05:52	2005-10-26	Show	GitHub Exploit DB Packet Storm

349764	-	apple	mac_os_x mac_os_x_server	Mail.app in Mail for Apple Mac OS X 10.3.9 and 10.4.2 includes message contents when using auto-reply rules, which could cause Mail.app to include decrypted message contents for encrypted messages.	NVD-CWE-Other	CVE-2005-2746	2008-09-6 05:52	2005-10-26	Show	GitHub Exploit DB Packet Storm

349765	-	apple	mac_os_x mac_os_x_server	The malloc function in the libSystem library in Apple Mac OS X 10.3.9 and 10.4.2 allows local users to overwrite arbitrary files by setting the MallocLogFile environment variable to the target file b…	NVD-CWE-Other	CVE-2005-2748	2008-09-6 05:52	2005-10-26	Show	GitHub Exploit DB Packet Storm

349766	-	phpgroupware	phpgroupware	Cross-site scripting (XSS) vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message.	NVD-CWE-Other	CVE-2005-2761	2008-09-6 05:52	2005-09-1	Show	GitHub Exploit DB Packet Storm

349767	-	avaya	vpnremote	Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's credentials.	NVD-CWE-Other	CVE-2005-2762	2008-09-6 05:52	2005-12-31	Show	GitHub Exploit DB Packet Storm

349768	-	microsoft	windows_2003_server windows_xp	The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activ…	NVD-CWE-Other	CVE-2005-2765	2008-09-6 05:52	2005-09-2	Show	GitHub Exploit DB Packet Storm

349769	-	wrq	wrq_reflection_for_secure_it_windows_server	WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) does not properly handle when the Windows Administrator or Guest accounts are renamed after SSH key authenticat…	NVD-CWE-Other	CVE-2005-2770	2008-09-6 05:52	2005-09-3	Show	GitHub Exploit DB Packet Storm

349770	-	f-secure wrq	f-secure_ssh_server wrq_reflection_for_secure_it_windows_server	WRQ Reflection for Secure IT Windows Server 6.0 (formerly known as F-Secure SSH server) processes access and deny lists in a case-sensitive manner, when previous versions were case-insensitive, which…	NVD-CWE-Other	CVE-2005-2771	2008-09-6 05:52	2005-09-3	Show	GitHub Exploit DB Packet Storm