Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201121	8.8	重要 Network	s9y	-	Serendipity におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-5476	2017-01-27 10:57	2017-01-12	Show	GitHub Exploit DB Packet Storm

201122	8.8	重要 Network	s9y	-	Serendipity の comment.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2017-5475	2017-01-27 10:57	2017-01-12	Show	GitHub Exploit DB Packet Storm

201123	6.1	警告 Network	s9y	-	Serendipity の comment.php におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2017-5474	2017-01-27 10:57	2017-01-12	Show	GitHub Exploit DB Packet Storm

201124	5.5	警告 Local	JasPer Project	-	JasPer の jpc_dec.c の jpc_dec_tiledecode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-8883	2017-01-27 10:54	2016-10-20	Show	GitHub Exploit DB Packet Storm

201125	5.5	警告 Local	JasPer Project	-	JasPer の libjasper/jpc/jpc_dec.c の jpc_dec_tilefini 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-8882	2017-01-27 10:54	2016-10-20	Show	GitHub Exploit DB Packet Storm

201126	8.8	重要 Network	Liferay	-	Liferay Portal における任意のシェルコマンドを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-5327	2017-01-27 10:53	2010-01-15	Show	GitHub Exploit DB Packet Storm

201127	7.5	重要 Network	マイクロソフト日立	-	複数の Microsoft Windows 製品のローカルセキュリティ機関サブシステムサービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2017-0004	2017-01-27 10:43	2017-01-10	Show	GitHub Exploit DB Packet Storm

201128	7.5	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor の CliMonitorReportServlet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8207	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

201129	7.5	重要 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor のサーブレット SoftwareImageUpload におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8206	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

201130	9.8	緊急 Network	ブロケードコミュニケーションズシステムズ株式会社	-	Brocade Network Advisor の DashboardFileReceiveServlet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-8205	2017-01-27 10:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354911	-	netgear	fm114p	NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-1877	2009-10-14 13:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

354912	-	post_affiliate_pro	post_affiliate_pro	merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory…	NVD-CWE-Other	CVE-2005-3910	2009-10-9 13:33	2005-11-30	Show	GitHub Exploit DB Packet Storm

354913	-	babe_logger	babe_logger	SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal parameter to index.php or (2) id parameter to comments.php.	NVD-CWE-Other	CVE-2005-3920	2009-10-9 13:33	2005-11-30	Show	GitHub Exploit DB Packet Storm

354914	-	socketkb	socketkb	PHP file include vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to include arbitrary local files via the __f parameter.	NVD-CWE-Other	CVE-2005-3936	2009-10-9 13:33	2005-12-1	Show	GitHub Exploit DB Packet Storm

354915	-	softbiz	b2b_trading_marketplace_script	SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffe…	NVD-CWE-Other	CVE-2005-3937	2009-10-9 13:33	2005-12-1	Show	GitHub Exploit DB Packet Storm

354916	-	sun	java_plug-in	The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating …	CWE-16 Configuration	CVE-2005-4845	2009-08-28 13:00	2005-12-31	Show	GitHub Exploit DB Packet Storm

354917	-	gnu	mailman	Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.	NVD-CWE-Other	CVE-2002-0388	2009-07-22 06:00	2002-06-18	Show	GitHub Exploit DB Packet Storm

354918	-	wowbb	wowbb_web_forum	Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the (1) sort_by or (2) page parameters to view_user.php, or the (3) forum_id pa…	NVD-CWE-Other	CVE-2004-2181	2009-06-25 13:25	2004-12-31	Show	GitHub Exploit DB Packet Storm

354919	-	abe_timmerman	zml.cgi	Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.	NVD-CWE-Other	CVE-2001-1209	2009-04-30 13:08	2001-12-31	Show	GitHub Exploit DB Packet Storm

354920	-	virtual_programming	vp-asp	SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password fields.	NVD-CWE-Other	CVE-2002-1919	2009-04-11 13:14	2002-12-31	Show	GitHub Exploit DB Packet Storm