Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197741 5.5 警告
Local
OpenJPEG project
Fedora Project
- OpenJPEG の tcd.c の opj_tcd_init_tile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-369
ゼロ除算
CVE-2016-4797 2017-02-14 11:04 2016-05-9 Show GitHub Exploit DB Packet Storm
197742 5.5 警告
Local
OpenJPEG project
Fedora Project
- OpenJPEG の common/color.c の color_cmyk_to_rgb におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4796 2017-02-14 11:04 2016-05-9 Show GitHub Exploit DB Packet Storm
197743 5.5 警告
Local
OpenJPEG project - OpenJPEG の common/color.c の sycc422_t_rgb 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-3183 2017-02-14 11:04 2016-04-30 Show GitHub Exploit DB Packet Storm
197744 7.5 重要
Network
Artifex Software
Fedora Project
- Artifex Software, Inc. の MuJS の regexp.c の js_regcomp 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9108 2017-02-14 10:57 2016-10-31 Show GitHub Exploit DB Packet Storm
197745 6.1 警告
Network
WordPress.org - WordPress の投稿リストテーブルの wp-admin/includes/class-wp-posts-list-table.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5612 2017-02-13 17:32 2017-01-26 Show GitHub Exploit DB Packet Storm
197746 9.8 緊急
Network
WordPress.org - WordPress の WP_Query の wp-includes/class-wp-query.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5611 2017-02-13 17:32 2017-01-26 Show GitHub Exploit DB Packet Storm
197747 5.3 警告
Network
WordPress.org - WordPress の Press This の wp-admin/includes/class-wp-press-this.php におけるアクセス制限を回避される脆弱性 CWE-200
情報漏えい
CVE-2017-5610 2017-02-13 17:32 2017-01-26 Show GitHub Exploit DB Packet Storm
197748 7.8 重要
Local
Peter Selinger - potrace の bitmap_io.c の bm_readbody_bmp 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8703 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
197749 7.8 重要
Local
Peter Selinger - potrace の bitmap_io.c の bm_readbody_bmp 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8702 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
197750 7.8 重要
Local
Peter Selinger - potrace の bitmap_io.c の bm_readbody_bmp 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8701 2017-02-13 17:30 2016-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347611 - hp hp-ux HP-UX vgdisplay program gives root access to local users. NVD-CWE-Other
CVE-1999-0309 2013-07-21 13:11 1997-02-1 Show GitHub Exploit DB Packet Storm
347612 - aspcodecms aspcode_cms Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to hijack the authentication of an administr… CWE-352
 Origin Validation Error
CVE-2010-0711 2013-07-20 15:53 2010-02-26 Show GitHub Exploit DB Packet Storm
347613 - sun solaris Unknown vulnerability in Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors related to the "/proc" filesystem, which trigger a null dereference. NVD-CWE-Other
CVE-2005-3250 2013-07-20 14:20 2005-10-18 Show GitHub Exploit DB Packet Storm
347614 - iatek portalapp Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter. NVD-CWE-Other
CVE-2005-4482 2013-07-18 22:37 2005-12-22 Show GitHub Exploit DB Packet Storm
347615 - speartek speartek Cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NVD-CWE-Other
CVE-2005-4493 2013-07-17 23:41 2005-12-22 Show GitHub Exploit DB Packet Storm
347616 - osticket osticket Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to … NVD-CWE-Other
CVE-2005-1436 2013-07-14 13:38 2005-05-3 Show GitHub Exploit DB Packet Storm
347617 - symantec discovery
on_command_discovery
The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with null passwords, which could allow attackers to gain … NVD-CWE-Other
CVE-2005-3316 2013-07-7 13:45 2005-10-27 Show GitHub Exploit DB Packet Storm
347618 - onlinetechtools.com owos_lite SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NVD-CWE-Other
CVE-2005-3852 2013-07-3 23:48 2005-11-27 Show GitHub Exploit DB Packet Storm
347619 - vmware workstation
player
ace
server
fusion
The virtual networking stack in VMware Workstation 7.0 before 7.0.1 build 227600, VMware Workstation 6.5.x before 6.5.4 build 246459 on Windows, VMware Player 3.0 before 3.0.1 build 227600, VMware Pl… CWE-200
Information Exposure
CVE-2010-1138 2013-05-15 12:07 2010-04-13 Show GitHub Exploit DB Packet Storm
347620 - vmware workstation
player
server
fusion
vix_api
Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VM… CWE-134
Use of Externally-Controlled Format String
CVE-2010-1139 2013-05-15 12:07 2010-04-13 Show GitHub Exploit DB Packet Storm