Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
196971 6.3 警告
Local
SimpleSAMLphp - SimpleSAMLphp の SimpleSAML_XML_Validator クラスコンストラクタにおける SAML 1 レスポンス上の署名を偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2016-9955 2017-03-10 15:54 2016-12-2 Show GitHub Exploit DB Packet Storm
196972 5.5 警告
Local
ImageMagick - ImageMagick の MagickCore/pixel-accessor.h の IsPixelGray 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
CWE-125
CVE-2016-9773 2017-03-10 15:51 2016-12-2 Show GitHub Exploit DB Packet Storm
196973 7.5 重要
Local
シトリックス・システムズ - Xen の ioport_read および ioport_write 関数における qemu プロセスの権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-9637 2017-03-10 15:47 2016-12-6 Show GitHub Exploit DB Packet Storm
196974 7.5 重要
Network
SAP - SAP KERNEL の SAP メッセージサーバ HTTP デーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-5997 2017-03-10 15:40 2017-02-15 Show GitHub Exploit DB Packet Storm
196975 7.8 重要
Local
JasPer Project - JasPer の jpc_tsfb.c の jpc_tsfb_getbands2 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-9560 2017-03-10 15:39 2016-11-20 Show GitHub Exploit DB Packet Storm
196976 5.5 警告
Local
JasPer Project
Fedora Project
- JasPer の libjasper/bmp/bmp_dec.c の bmp_getdata 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-8690 2017-03-10 15:39 2016-10-16 Show GitHub Exploit DB Packet Storm
196977 9.8 緊急
Network
MetalGenix - GeniXCMS における CSRF トークンを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-5959 2017-03-10 15:38 2017-02-13 Show GitHub Exploit DB Packet Storm
196978 9.8 緊急
Network
modified - modified eCommerce Shopsoftware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-3694 2017-03-10 15:38 2016-04-16 Show GitHub Exploit DB Packet Storm
196979 7.5 重要
Network
Fidelix Ltd - Fidelix FX-20 シリーズコントローラにおけるサーバ上の任意のファイルおよびディレクトリにアクセスされる脆弱性 CWE-22
パス・トラバーサル
CVE-2016-9364 2017-03-10 15:37 2016-12-22 Show GitHub Exploit DB Packet Storm
196980 7.5 重要
Network
Debian
OFFIS
- DICOM dcmtk の storescp の parsePresentationContext 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8979 2017-03-10 15:36 2015-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348851 - johnmccollum com_advertising Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (… CWE-22
Path Traversal
CVE-2010-1473 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348852 - alphaplug com_alphauserpoints Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact v… CWE-22
Path Traversal
CVE-2010-1476 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348853 - martin_hess com_sermonspeaker SQL injection vulnerability in the SermonSpeaker (com_sermonspeaker) component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latest_serm… CWE-89
SQL Injection
CVE-2010-1477 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348854 - ternaria com_jfeedback Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other … CWE-22
Path Traversal
CVE-2010-1478 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348855 - rockettheme com_rokmodule SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.ph… CWE-89
SQL Injection
CVE-2010-1479 2010-06-11 13:00 2010-04-20 Show GitHub Exploit DB Packet Storm
348856 - pligg pligg_cms Multiple cross-site request forgery (CSRF) vulnerabilities in Pligg before 1.0.3 allow remote attackers to hijack the authentication of administrators for requests that create user accounts or have u… CWE-352
 Origin Validation Error
CVE-2009-4787 2010-06-11 13:00 2010-04-21 Show GitHub Exploit DB Packet Storm
348857 - shape5 bridge_of_hope_template SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to index.php. CWE-89
SQL Injection
CVE-2010-2254 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
348858 - tamlyncreative com_bfsurvey_profree
com_bfsurvey_pro
com_bfsurvey_basic
SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsurvey_profree) component 1.2.6, and BF Survey Basic component before 1.2 for Joo… CWE-89
SQL Injection
CVE-2010-2255 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
348859 - payperviewvideosoftware pay_per_minute_video_chat_script Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/mem… CWE-79
Cross-site Scripting
CVE-2010-2256 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm
348860 - payperviewvideosoftware pay_per_minute_video_chat_script SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. CWE-89
SQL Injection
CVE-2010-2257 2010-06-10 13:00 2010-06-10 Show GitHub Exploit DB Packet Storm