Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200031 9.8 緊急
Network
The OTR Development Team - Pidgin 用 OTR pidgin-otr プラグインの gtk-dialog.c の create_smp_dialog 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-8833 2016-04-18 15:42 2016-03-9 Show GitHub Exploit DB Packet Storm
200032 7.1 重要
Network
日本電気 - Aterm WF800HP におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1168 2016-04-18 15:39 2016-03-30 Show GitHub Exploit DB Packet Storm
200033 4.3 警告
Network
日本電気 - Aterm WG300HP におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1167 2016-04-18 15:39 2016-03-30 Show GitHub Exploit DB Packet Storm
200034 7.8 重要
Local
AVAST Software s.r.o. - 複数の Avast 製品の Avast 仮想化ドライバにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-8620 2016-04-18 15:30 2015-12-23 Show GitHub Exploit DB Packet Storm
200035 6.5 警告
Local
Fabrice Bellard - QEMU の net/checksum.c の net_checksum_calculate 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2857 2016-04-18 15:10 2016-03-8 Show GitHub Exploit DB Packet Storm
200036 5.9 警告
Network
Fabrice Bellard - QEMU の hw/scsi/scsi-bus.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-5158 2016-04-18 15:10 2015-07-22 Show GitHub Exploit DB Packet Storm
200037 4.3 警告
Network
Atlassian - Atlassian Confluence における設定ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2015-8399 2016-04-18 14:52 2015-11-19 Show GitHub Exploit DB Packet Storm
200038 8.8 重要
Network
Debian
OAR project
- OAR の oarsh スクリプトにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1235 2016-04-18 14:52 2016-03-31 Show GitHub Exploit DB Packet Storm
200039 5.3 警告
Network
Google
レッドハット
- Kubernetes における任意の pod ログが読まれる脆弱性 CWE-200
情報漏えい
CVE-2015-7528 2016-04-18 14:47 2015-12-3 Show GitHub Exploit DB Packet Storm
200040 6.1 警告
Network
フォーティネット - FortiOS の Web ユーザインターフェースにおけるユーザを任意の Web サイトにリダイレクトされる脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3978 2016-04-18 14:45 2016-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307031 - wordpress wordpress Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title o… NVD-CWE-Other
CVE-2005-1102 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307032 - sygate_technologies security_agent Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by… NVD-CWE-Other
CVE-2005-1103 2016-10-18 12:17 2005-04-12 Show GitHub Exploit DB Packet Storm
307033 - centra centra Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name fields. NVD-CWE-Other
CVE-2005-1104 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307034 - sun javamail Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. (dot dot) in the filename in the Content-Dispositi… NVD-CWE-Other
CVE-2005-1105 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307035 - apple quicktime_pictureviewer PictureViewer in QuickTime for Windows 6.5.2 allows remote attackers to cause a denial of service (application crash) via a GIF image with the maximum depth start value, possibly triggering an intege… NVD-CWE-Other
CVE-2005-1106 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307036 - phpbb_group
smartor
phpbb
photo_album
Multiple cross-site scripting (XSS) vulnerabilities in Photo Album 2.0.53 module for phpBB allow remote attackers to inject arbitrary web script or HTML via the bsid parameter to (1) album_cat.php or… NVD-CWE-Other
CVE-2005-1115 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307037 - phpbb_group phpbb Cross-site scripting (XSS) vulnerability in the Calendar module for phpBB allow remote attackers to inject arbitrary web script or HTML via the start parameter to calendar_scheduler.php. NVD-CWE-Other
CVE-2005-1116 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307038 - all4www all4www-homepagecreator PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remo… NVD-CWE-Other
CVE-2005-1117 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307039 - ibm iseries_as_400 The POP3 server in IBM iSeries AS/400 returns different error messages when the user exists or not, which allows remote attackers to determine valid user IDs on the server. NVD-CWE-Other
CVE-2005-1133 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm
307040 - alexander_palmo simple_php_blog Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NVD-CWE-Other
CVE-2005-1135 2016-10-18 12:17 2005-05-2 Show GitHub Exploit DB Packet Storm