Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197921 9.8 緊急
Network
libxpm project - libXpm における整数オーバーフローの脆弱性 CWE-119
CWE-190
CWE-787
CVE-2016-10164 2017-03-9 11:29 2016-12-12 Show GitHub Exploit DB Packet Storm
197922 5.9 警告
Network
ChatSecure
Zom
- ChatSecure および Zom の複数の XMPP クライアントの "XEP-0280: Message Carbons" の実装における連絡先を含むユーザになりすまされる脆弱性 CWE-20
CWE-346
CVE-2017-5590 2017-03-8 19:10 2017-01-24 Show GitHub Exploit DB Packet Storm
197923 6.1 警告
Network
Visonic - Visonic PowerLink2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5811 2017-03-8 19:06 2016-12-13 Show GitHub Exploit DB Packet Storm
197924 9.8 緊急
Network
OmniMetrix, LLC - OmniMetrix OmniView Web アプリケーションにおけるアクセス権を取得される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-5801 2017-03-8 19:02 2016-12-15 Show GitHub Exploit DB Packet Storm
197925 7.5 重要
Network
OmniMetrix, LLC - OmniMetrix OmniView Web アプリケーションにおけるアカウント認証情報が漏えいする脆弱性 CWE-200
情報漏えい
CVE-2016-5786 2017-03-8 19:02 2016-12-15 Show GitHub Exploit DB Packet Storm
197926 9.8 緊急
Network
Lynxspring - Lynxspring JENEsys BAS Bridge におけるアプリケーションのデータベースにおいて認証情報の保護に十分なセーフガードが欠落している脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-8378 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
197927 8.8 重要
Network
Lynxspring - Lynxspring JENEsys BAS Bridge におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-8369 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
197928 8.6 重要
Network
Lynxspring - Lynxspring JENEsys BAS Bridge における認証なしでシステム内に侵入される脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2016-8361 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
197929 7.1 重要
Network
Lynxspring - Lynxspring JENEsys BAS Bridge における読み取り専用アクセスでアプリケーション内にて任意の変更を許可される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8357 2017-03-8 18:51 2016-11-15 Show GitHub Exploit DB Packet Storm
197930 6.1 警告
Network
Moxa Inc. - 複数の Moxa NPort 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9371 2017-03-8 18:37 2016-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347131 - phpmyfaq phpmyfaq SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field. CWE-89
SQL Injection
CVE-2005-3046 2016-10-18 12:32 2005-09-24 Show GitHub Exploit DB Packet Storm
347132 - phpmyfaq phpmyfaq Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LA… CWE-79
Cross-site Scripting
CVE-2005-3047 2016-10-18 12:32 2005-09-24 Show GitHub Exploit DB Packet Storm
347133 - phpmyfaq phpmyfaq Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter, which als… NVD-CWE-Other
CVE-2005-3048 2016-10-18 12:32 2005-09-24 Show GitHub Exploit DB Packet Storm
347134 - phpmyfaq phpmyfaq PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message. NVD-CWE-Other
CVE-2005-3050 2016-10-18 12:32 2005-09-24 Show GitHub Exploit DB Packet Storm
347135 - - - SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php. NVD-CWE-Other
CVE-2005-3052 2016-10-18 12:32 2005-09-24 Show GitHub Exploit DB Packet Storm
347136 - powerarchiver powerarchiver_2002
powerarchiver_2003
powerarchiver_2004
powerarchiver_2006
Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a (1) ACE or (2) ARJ archive. NVD-CWE-Other
CVE-2005-3061 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
347137 - alstrasoft e-friends PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter. NVD-CWE-Other
CVE-2005-3062 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
347138 - unu_networks mailgust SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page. NVD-CWE-Other
CVE-2005-3063 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
347139 - cmsmadesimple cms_made_simple Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2005-3083 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
347140 - mantis mantis Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, whic… NVD-CWE-Other
CVE-2005-3090 2016-10-18 12:32 2005-09-29 Show GitHub Exploit DB Packet Storm