Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197361 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/modules/addressbook/controllers/addressController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9019 2017-03-29 15:00 2016-11-2 Show GitHub Exploit DB Packet Storm
197362 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/core/models/expConfig.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-7789 2017-03-29 15:00 2016-11-2 Show GitHub Exploit DB Packet Storm
197363 9.8 緊急
Network
Exponent CMS project - Exponent CMS の ramework/modules/users/models/user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-7788 2017-03-29 15:00 2016-09-29 Show GitHub Exploit DB Packet Storm
197364 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/core/subsystems/expRouter.php の getSection 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-7784 2017-03-29 15:00 2016-10-27 Show GitHub Exploit DB Packet Storm
197365 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/core/models/expRecord.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-7783 2017-03-29 15:00 2016-11-2 Show GitHub Exploit DB Packet Storm
197366 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/core/models/expConfig.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-7782 2017-03-29 15:00 2016-11-2 Show GitHub Exploit DB Packet Storm
197367 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/modules/blog/controllers/blogController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-7781 2017-03-29 14:59 2016-09-29 Show GitHub Exploit DB Packet Storm
197368 9.8 緊急
Network
Exponent CMS project - Exponent CMS の cron/find_help.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-7780 2017-03-29 14:59 2016-09-30 Show GitHub Exploit DB Packet Storm
197369 9.8 緊急
Network
libupnp project
Debian
- Portable UPnP SDK の gena/gena_device.c の create_url_list 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8863 2017-03-29 12:19 2016-09-7 Show GitHub Exploit DB Packet Storm
197370 7.5 重要
Network
libupnp project
Debian
- Portable UPnP SDK における webroot の 任意のファイルに書き込まれる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-6255 2017-03-29 12:19 2016-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347691 - pmachine pmachine_pro PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to exec… NVD-CWE-Other
CVE-2005-0513 2016-10-18 12:12 2005-02-19 Show GitHub Exploit DB Packet Storm
347692 - twiki imagegalleryplugin The ImageGalleryPlugin (ImageGalleryPlugin.pm) in Twiki allows remote attackers to execute arbitrary commands via certain commands that generate thumbnails. NVD-CWE-Other
CVE-2005-0516 2016-10-18 12:12 2005-02-23 Show GitHub Exploit DB Packet Storm
347693 - pblang pblang Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the search string to search.php, (2) the subject of a PM, whic… NVD-CWE-Other
CVE-2005-0526 2016-10-18 12:12 2005-05-2 Show GitHub Exploit DB Packet Storm
347694 - igeneric free_shopping_cart Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the (1) cats, (2) l_price, or (3) u_price parameters. NVD-CWE-Other
CVE-2005-0537 2016-10-18 12:12 2005-02-21 Show GitHub Exploit DB Packet Storm
347695 - cyclades alterpath_manager Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to obtain sensitive information via a direct request to the /about.html page. NVD-CWE-Other
CVE-2005-0540 2016-10-18 12:12 2005-05-2 Show GitHub Exploit DB Packet Storm
347696 - cyclades alterpath_manager consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter. NVD-CWE-Other
CVE-2005-0541 2016-10-18 12:12 2005-05-2 Show GitHub Exploit DB Packet Storm
347697 - cyclades alterpath_manager saveUser.do in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows local users to gain privileges by setting the adminUser parameter to true. NVD-CWE-Other
CVE-2005-0542 2016-10-18 12:12 2005-05-2 Show GitHub Exploit DB Packet Storm
347698 - sun solaris_answerbook2 Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function. NVD-CWE-Other
CVE-2005-0548 2016-10-18 12:12 2005-03-7 Show GitHub Exploit DB Packet Storm
347699 - sun solaris_answerbook2 Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function. NVD-CWE-Other
CVE-2005-0549 2016-10-18 12:12 2005-05-2 Show GitHub Exploit DB Packet Storm
347700 - raven_software soldier_of_fortune_2 Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference. NVD-CWE-Other
CVE-2005-0568 2016-10-18 12:12 2005-05-2 Show GitHub Exploit DB Packet Storm