Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
198931	7.8	重要 Local	libbpg	-	Libbpg ライブラリの BPG 画像の復号化におけるヒープ境界外への書き込みを行う脆弱性	CWE-787 境界外書き込み	CVE-2016-8710	2017-02-10 10:34	2016-10-17	Show	GitHub Exploit DB Packet Storm

198932	7.8	重要 Local	Lenovo	-	Windows を稼動する複数の Lenovo システムで使用される Lenovo Transition における権限を昇格される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8227	2017-02-10 10:09	2016-12-29	Show	GitHub Exploit DB Packet Storm

198933	4.9	警告 Network	Lenovo	-	複数の Lenovo System 製品の BIOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-19 データ処理	CVE-2016-8226	2017-02-10 10:09	2016-12-15	Show	GitHub Exploit DB Packet Storm

198934	7.8	重要 Local	Lenovo	-	Lenovo Edge および Lenovo Slim USB キーボードドライバーにおける昇格された権限でコードを実行される脆弱性	CWE-428 引用されない検索パスまたは要素	CVE-2016-8225	2017-02-10 10:09	2016-12-15	Show	GitHub Exploit DB Packet Storm

198935	9.8	緊急 Network	Aerospike, Inc.	-	Aerospike Database Server のクエリ機能の as_sindex__simatch_list_by_set_binid 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9054	2017-02-9 18:44	2016-10-26	Show	GitHub Exploit DB Packet Storm

198936	9.8	緊急 Network	Aerospike, Inc.	-	Aerospike Database Server のクエリ機能の as_sindex__simatch_by_iname 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9052	2017-02-9 18:44	2016-10-26	Show	GitHub Exploit DB Packet Storm

198937	8.2	重要 Network	Aerospike, Inc.	-	Aerospike Database Server のクライアントメッセージの構文解析機能における境界外読み取りの脆弱性	CWE-125 境界外読み取り	CVE-2016-9050	2017-02-9 18:44	2016-10-26	Show	GitHub Exploit DB Packet Storm

198938	6.1	警告 Network	eClinicalWorks	-	eClinicalWorks Patient Portal の raceMasterList.jsp における反射型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5599	2017-02-9 18:23	2017-01-27	Show	GitHub Exploit DB Packet Storm

198939	7.5	重要 Network	eClinicalWorks	-	eClinicalWorks healow＠work の EmployeePortalServlet におけるブラインド SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-5598	2017-02-9 18:22	2017-01-27	Show	GitHub Exploit DB Packet Storm

198940	6.1	警告 Network	Opera Software ASA	-	Android 用 Opera における URL を偽装される脆弱性	CWE-601 オープンリダイレクト	CVE-2016-6908	2017-02-9 18:21	2016-08-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346321	-	netbsd	netbsd	Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and…	NVD-CWE-Other	CVE-2004-1323	2017-07-11 10:30	2004-12-16	Show	GitHub Exploit DB Packet Storm

346322	-	microsoft	windows_media_player	The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if …	NVD-CWE-Other	CVE-2004-1324	2017-07-11 10:30	2004-12-18	Show	GitHub Exploit DB Packet Storm

346323	-	microsoft	windows_media_player	The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote at…	NVD-CWE-Other	CVE-2004-1325	2017-07-11 10:30	2004-12-18	Show	GitHub Exploit DB Packet Storm

346324	-	ultrix	dxterm	Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.	NVD-CWE-Other	CVE-2004-1326	2017-07-11 10:30	2004-12-20	Show	GitHub Exploit DB Packet Storm

346325	-	crystal_art_software	crystal_ftp	Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.	NVD-CWE-Other	CVE-2004-1327	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

346326	-	ibm	aix	Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.	NVD-CWE-Other	CVE-2004-1330	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

346327	-	debian gentoo	tetex-bin linux	The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.	NVD-CWE-Other	CVE-2004-1336	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346328	-	gnu conectiva ubuntu	realtime_linux_security_module linux ubuntu_linux	The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to g…	NVD-CWE-Other	CVE-2004-1337	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346329	-	oracle	database_server oracle9i	The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2004-1338	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346330	-	oracle	database_server oracle9i	SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the …	CWE-89 SQL Injection	CVE-2004-1339	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm