Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200381 6.8 警告
Network 		The phpMyAdmin Project - phpMyAdmin におけるファイルシステムのトラバース制限を回避される脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-6614 2016-12-16 18:16 2016-07-12 Show GitHub Exploit DB Packet Storm
200382 5.3 警告
Network 		The phpMyAdmin Project - phpMyAdmin におけるファイルのシンボリックリンクをディスク上に作成される脆弱性 CWE-200
情報漏えい 		CVE-2016-6613 2016-12-16 18:16 2016-07-12 Show GitHub Exploit DB Packet Storm
200383 4.3 警告
Network 		The phpMyAdmin Project - phpMyAdmin のエクスポートメカニズムにおけるディスク上のフルパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-6610 2016-12-16 18:16 2016-07-12 Show GitHub Exploit DB Packet Storm
200384 8.8 重要
Network 		The phpMyAdmin Project - phpMyAdmin の配列エクスポート機能における任意の PHP コマンドを実行される脆弱性 CWE-77
コマンドインジェクション 		CVE-2016-6609 2016-12-16 18:16 2016-07-12 Show GitHub Exploit DB Packet Storm
200385 7.1 重要
Network 		PostgreSQL.org
Debian		 - PostgreSQL におけるスーパーユーザ権限を取得される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-5424 2016-12-16 16:04 2016-08-11 Show GitHub Exploit DB Packet Storm
200386 8.3 重要
Network 		PostgreSQL.org
Debian		 - PostgreSQL におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-5423 2016-12-16 16:04 2016-08-11 Show GitHub Exploit DB Packet Storm
200387 7.5 重要
Network 		GNU Project - GNU tar の safer_name_suffix 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-6321 2016-12-16 16:03 2016-10-29 Show GitHub Exploit DB Packet Storm
200388 9.8 緊急
Network 		Atlassian - Atlassian Crowd の LDAP ディレクトリコネクタにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6496 2016-12-16 16:03 2016-09-26 Show GitHub Exploit DB Packet Storm
200389 9.8 緊急
Network 		アドビシステムズ - Adobe Flash Player における解放済みメモリ使用 (use-after-free) の脆弱性 CWE-416
解放済みメモリの使用 		CVE-2016-7892 2016-12-16 14:07 2016-12-13 Show GitHub Exploit DB Packet Storm
200390 9.8 緊急
Network 		アドビシステムズ - Adobe Flash Player の同一生成元ポリシーの実装におけるセキュリティを回避される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-7890 2016-12-16 13:58 2016-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352391 - apple safari
mac_os_x 		Safari in WebKit in Mac OS X 10.4 to 10.4.2 directly accesses URLs within PDF files without the normal security checks, which allows remote attackers to execute arbitrary code via links in a PDF file. NVD-CWE-Other
CVE-2005-2522 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
352392 - apple weblog_server
mac_os_x 		Multiple cross-site scripting (XSS) vulnerabilities in Weblog Server in Mac OS X 10.4 to 10.4.2 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD-CWE-Other
CVE-2005-2523 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
352393 - apple safari
mac_os_x
mac_os_x_server 		Safari after 2.0 in Apple Mac OS X 10.3.9 allows remote attackers to bypass domain restrictions via crafted web archives that cause Safari to render them as if they came from a different site. NVD-CWE-Other
CVE-2005-2524 2008-09-6 05:51 2005-10-26 Show GitHub Exploit DB Packet Storm
352394 - easy_software_products
apple 		cups
mac_os_x 		CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt). NVD-CWE-Other
CVE-2005-2525 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
352395 - easy_software_products
apple 		cups
mac_os_x 		CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection. NVD-CWE-Other
CVE-2005-2526 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
352396 - maxwebportal maxwebportal SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter. NVD-CWE-Other
CVE-2005-1779 2008-09-6 05:50 2005-05-31 Show GitHub Exploit DB Packet Storm
352397 - mailenable mailenable_enterprise
mailenable_professional 		Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash). NVD-CWE-Other
CVE-2005-1781 2008-09-6 05:50 2005-05-31 Show GitHub Exploit DB Packet Storm
352398 - w.m.r._simpson bookreview Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to (1) add_review.htm, (2) suggest_revi… NVD-CWE-Other
CVE-2005-1782 2008-09-6 05:50 2005-05-26 Show GitHub Exploit DB Packet Storm
352399 - hosting_controller hosting_controller Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp. NVD-CWE-Other
CVE-2005-1784 2008-09-6 05:50 2005-05-27 Show GitHub Exploit DB Packet Storm
352400 - hosting_controller hosting_controller SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter. NVD-CWE-Other
CVE-2005-1788 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm