Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200851 9.8 緊急
Network 		Google
OpenSSL Project
オラクル		 - OpenSSL の crypto/dsa/dsa_ameth.c の dsa_priv_decode 関数におけるメモリ二重解放の脆弱性 CWE-Other
その他 		CVE-2016-0705 2016-11-21 15:32 2016-03-1 Show GitHub Exploit DB Packet Storm
200852 5.1 警告
Local 		OpenSSL Project
日立
オラクル		 - OpenSSL の crypto/bn/bn_exp.c の MOD_EXP_CTIME_COPY_FROM_PREBUF 関数における RSA の鍵を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-0702 2016-11-21 15:32 2016-03-1 Show GitHub Exploit DB Packet Storm
200853 4 警告 ヒューレット・パッカード
Debian
Canonical
Apache Software Foundation		 - Apache Tomcat における SecurityManager の制限を回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-0706 2016-11-21 15:32 2016-01-5 Show GitHub Exploit DB Packet Storm
200854 10 危険 日立
Canonical
オラクル		 - Oracle Java SE および Java SE Embedded における 2D に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0494 2016-11-21 15:32 2016-01-19 Show GitHub Exploit DB Packet Storm
200855 10 危険 日立
Canonical
オラクル		 - 複数の Oracle Java 製品における AWT に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0483 2016-11-21 15:32 2016-01-19 Show GitHub Exploit DB Packet Storm
200856 5.8 警告 日立
オラクル		 - 複数の Oracle Java 製品における Libraries に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0475 2016-11-21 15:32 2016-01-19 Show GitHub Exploit DB Packet Storm
200857 5 警告 日立
Canonical
オラクル		 - 複数の Oracle Java 製品 における JAXP に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0466 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
200858 4 警告 日立
Canonical
オラクル		 - Oracle Java SE および Java SE Embedded における JMX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0448 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
200859 5 警告 日立
Canonical
オラクル		 - Oracle Java SE および Java SE Embedded における Networking に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-0402 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
200860 6.8 警告
Local 		オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-Other
その他 		CVE-2016-5610 2016-11-21 12:23 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345981 - xlinesoft asprunner SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements. NVD-CWE-Other
CVE-2004-2057 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345982 - xlinesoft asprunner ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages. NVD-CWE-Other
CVE-2004-2058 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345983 - xlinesoft asprunner ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable b… NVD-CWE-Other
CVE-2004-2060 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345984 - antiboard antiboard SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the (1) thread_id, (2) parent_id, or (3) mode parameters. NVD-CWE-Other
CVE-2004-2062 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345985 - antiboard antiboard Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inject arbitrary HTML or web script via the feedback parameter. NVD-CWE-Other
CVE-2004-2063 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345986 - verylost lostbook Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web script via the (1) Email or (2) Website fields. NVD-CWE-Other
CVE-2004-2064 2017-07-11 10:31 2004-07-29 Show GitHub Exploit DB Packet Storm
345987 - daniel_barron dansguardian DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename. NVD-CWE-Other
CVE-2004-2065 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345988 - linpha linpha SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies. NVD-CWE-Other
CVE-2004-2066 2017-07-11 10:31 2004-07-29 Show GitHub Exploit DB Packet Storm
345989 - jaws jaws SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) pa… NVD-CWE-Other
CVE-2004-2067 2017-07-11 10:31 2004-07-29 Show GitHub Exploit DB Packet Storm
345990 - macallan mail_solution Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after … NVD-CWE-Other
CVE-2004-2071 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm