Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
199831	8.2	重要 Network	オラクル	-	Oracle Siebel CRM の Siebel UI Framework における EAI に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3325	2017-02-1 11:18	2017-01-17	Show	GitHub Exploit DB Packet Storm

199832	3.1	低 Network	オラクル	-	Oracle Siebel CRM の Siebel UI Framework における Open UI に関する脆弱性	CWE-noinfo 情報不足	CVE-2017-3264	2017-02-1 11:18	2017-01-17	Show	GitHub Exploit DB Packet Storm

199833	9	緊急 Network	オラクル	-	Oracle Database Server の OJVM における脆弱性	CWE-noinfo 情報不足	CVE-2017-3310	2017-02-1 11:00	2017-01-17	Show	GitHub Exploit DB Packet Storm

199834	3.3	低 Local	オラクル	-	Oracle Database Server の RDBMS Security における脆弱性	CWE-200 情報漏えい	CVE-2017-3240	2017-02-1 11:00	2017-01-17	Show	GitHub Exploit DB Packet Storm

199835	10	緊急 Network	オラクル	-	Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management における Web Access に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3324	2017-02-1 10:48	2017-01-17	Show	GitHub Exploit DB Packet Storm

199836	8.1	重要 Network	オラクル	-	Oracle Primavera Products Suite の Primavera P6 Enterprise Project Portfolio Management における Team Member に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2017-3263	2017-02-1 10:48	2017-01-17	Show	GitHub Exploit DB Packet Storm

199837	6.5	警告 Network	WordPress.org	-	WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-6897	2017-02-1 10:37	2016-06-16	Show	GitHub Exploit DB Packet Storm

199838	7.1	重要 Network	WordPress.org	-	WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-6896	2017-02-1 10:37	2016-08-20	Show	GitHub Exploit DB Packet Storm

199839	4.3	警告 Network	WordPress.org	-	WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数における読み取りアクセス制限を回避される脆弱性	CWE-254 CWE-284	CVE-2016-10148	2017-02-1 10:37	2016-07-27	Show	GitHub Exploit DB Packet Storm

199840	4	警告 Local	Info-ZIP	-	Info-Zip UnZip の zipinfo.c の zi_short 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9844	2017-01-31 18:23	2016-12-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345911	-	apc	powerchute_network_shutdown	The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication crede…	NVD-CWE-Other	CVE-2005-4326	2017-07-20 10:29	2005-12-17	Show	GitHub Exploit DB Packet Storm

345912	-	anthony_boyd	phpbb_blog	Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via an invalid permalink parameter to index.php, which produces…	NVD-CWE-Other	CVE-2005-4346	2017-07-20 10:29	2005-12-19	Show	GitHub Exploit DB Packet Storm

345913	-	dragonfly freebsd linux openbsd	dragonfly freebsd linux_kernel openbsd	The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another…	NVD-CWE-Other	CVE-2005-4351	2017-07-20 10:29	2005-12-31	Show	GitHub Exploit DB Packet Storm

345914	-	box_uk	amaxus	Directory traversal vulnerability in Amaxus 3 and earlier allows remote attackers to access arbitrary files via ".." sequences in the change parameter.	NVD-CWE-Other	CVE-2005-4376	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm

345915	-	-	-	Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the (1) sort_mode parameter to (a) fisheye/list_g…	NVD-CWE-Other	CVE-2005-4379	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm

345916	-	bitweaver	bitweaver	Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) …	CWE-89 SQL Injection	CVE-2005-4380	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm

345917	-	citysoft	community_enterprise	SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the (1) nodeID, (2) pageID, (3) ID, and (4) parentid parameter to index.…	CWE-89 SQL Injection	CVE-2005-4382	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm

345918	-	citysoft	community_enterprise	Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the (1) presentationSite, (2) docPublishY…	NVD-CWE-Other	CVE-2005-4383	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm

345919	-	citysoft	community_enterprise	CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow…	NVD-CWE-Other	CVE-2005-4384	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm

345920	-	contens	contens	Cross-site scripting (XSS) vulnerability in search.cfm in CONTENS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the near parameter.	NVD-CWE-Other	CVE-2005-4388	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm