Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198211	5.5	警告 Local	icoutils project	-	icoutils の restable.c ソースファイルの decode_ne_resource_id 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2017-6009	2017-03-10 16:01	2017-02-3	Show	GitHub Exploit DB Packet Storm

198212	6.3	警告 Local	SimpleSAMLphp	-	SimpleSAMLphp の SimpleSAML_XML_Validator クラスコンストラクタにおける SAML 1 レスポンス上の署名を偽造される脆弱性	CWE-20 不適切な入力確認	CVE-2016-9955	2017-03-10 15:54	2016-12-2	Show	GitHub Exploit DB Packet Storm

198213	5.5	警告 Local	ImageMagick	-	ImageMagick の MagickCore/pixel-accessor.h の IsPixelGray 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 CWE-125	CVE-2016-9773	2017-03-10 15:51	2016-12-2	Show	GitHub Exploit DB Packet Storm

198214	7.5	重要 Local	シトリックス・システムズ	-	Xen の ioport_read および ioport_write 関数における qemu プロセスの権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9637	2017-03-10 15:47	2016-12-6	Show	GitHub Exploit DB Packet Storm

198215	7.5	重要 Network	SAP	-	SAP KERNEL の SAP メッセージサーバ HTTP デーモンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2017-5997	2017-03-10 15:40	2017-02-15	Show	GitHub Exploit DB Packet Storm

198216	7.8	重要 Local	JasPer Project	-	JasPer の jpc_tsfb.c の jpc_tsfb_getbands2 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9560	2017-03-10 15:39	2016-11-20	Show	GitHub Exploit DB Packet Storm

198217	5.5	警告 Local	JasPer Project Fedora Project	-	JasPer の libjasper/bmp/bmp_dec.c の bmp_getdata 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-8690	2017-03-10 15:39	2016-10-16	Show	GitHub Exploit DB Packet Storm

198218	9.8	緊急 Network	MetalGenix	-	GeniXCMS における CSRF トークンを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2017-5959	2017-03-10 15:38	2017-02-13	Show	GitHub Exploit DB Packet Storm

198219	9.8	緊急 Network	modified	-	modified eCommerce Shopsoftware における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-3694	2017-03-10 15:38	2016-04-16	Show	GitHub Exploit DB Packet Storm

198220	7.5	重要 Network	Fidelix Ltd	-	Fidelix FX-20 シリーズコントローラにおけるサーバ上の任意のファイルおよびディレクトリにアクセスされる脆弱性	CWE-22 パス・トラバーサル	CVE-2016-9364	2017-03-10 15:37	2016-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352381	-	phorum	phorum	Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.	NVD-CWE-Other	CVE-2003-1466	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352382	-	freebsd	slashem-tty	slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary c…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2003-1474	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352383	-	cerberus	ftp_server	Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.	NVD-CWE-Other	CVE-2003-1476	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352384	-	microsoft	mn-500_wireless_base_station	The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access.	CWE-255 Credentials Management	CVE-2003-1482	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352385	-	clearswift	mailsweeper	Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."	CWE-20 Improper Input Validation	CVE-2003-1485	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352386	-	snert.com	mod_throttle	mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges.	NVD-CWE-Other	CVE-2003-1502	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352387	-	mirc	mirc	Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filena…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2003-1508	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352388	-	bajie	java_http_server	Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the g…	CWE-79 Cross-site Scripting	CVE-2003-1511	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352389	-	khaled_mardam-bey	mirc	Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2003-1512	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm

352390	-	sun	java_plug-in	The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote …	NVD-CWE-Other	CVE-2003-1516	2008-09-6 05:37	2003-12-31	Show	GitHub Exploit DB Packet Storm