Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201241 7.5 重要
Network 		IBM - NPM を伴う IBM API Connect におけるアクセス制限を回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-3012 2016-12-2 16:14 2016-08-9 Show GitHub Exploit DB Packet Storm
201242 5.4 警告
Network 		IBM - IBM UrbanCode Deploy におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-2994 2016-12-2 16:14 2016-07-31 Show GitHub Exploit DB Packet Storm
201243 5.4 警告
Network 		IBM - IBM Lotus Protector for Mail Security におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-2991 2016-12-2 16:14 2016-08-8 Show GitHub Exploit DB Packet Storm
201244 5.4 警告
Network 		IBM - IBM Connections におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-2955 2016-12-2 16:14 2016-08-9 Show GitHub Exploit DB Packet Storm
201245 7.8 重要
Local 		IBM - Linux および UNIX 上で稼動する IBM Tivoli Monitoring の Agent の ax Shared Libraries におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-2946 2016-12-2 16:14 2016-08-9 Show GitHub Exploit DB Packet Storm
201246 8.8 重要
Network 		IBM - IBM TRIRIGA Application の通知コンポーネントにおける重要なパスワード情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2917 2016-12-2 16:14 2016-06-17 Show GitHub Exploit DB Packet Storm
201247 8.1 重要
Network 		IBM - Microsoft .NET 用 IBM IMS Enterprise Suite Data Provider における重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-2887 2016-12-2 16:12 2016-05-16 Show GitHub Exploit DB Packet Storm
201248 8 重要
Network 		IBM - IBM Forms Experience Builder におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-2884 2016-12-2 16:12 2016-08-1 Show GitHub Exploit DB Packet Storm
201249 6.5 警告
Network 		IBM - IBM Security QRadar SIEM および QRadar Incident Forensics におけるアクセス制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-2881 2016-12-2 16:12 2016-07-26 Show GitHub Exploit DB Packet Storm
201250 8 重要
Network 		IBM - IBM Security QRadar SIEM におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-2878 2016-12-2 16:12 2016-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354351 - netbsd netbsd imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack … NVD-CWE-Other
CVE-2005-4691 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354352 - mroovca mroovca_stats Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related to cookies. NVD-CWE-Other
CVE-2005-4692 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354353 - gaim-encryption gaim-encryption Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, possibly involving the GE_received_key function in keys.c. NVD-CWE-Other
CVE-2005-4693 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354354 - ipbproarcade ipbproarcade SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this… NVD-CWE-Other
CVE-2005-4702 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354355 - bea weblogic_server Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through SP7, when SSL is intended to be used, causes an unencrypted protocol to be used… NVD-CWE-Other
CVE-2005-4704 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354356 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client application creates an SSL connection to the server after it has already created an … NVD-CWE-Other
CVE-2005-4705 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354357 - php_handicapper php_handicapper CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the login parameter. NOTE: the vendor has dispute… NVD-CWE-Other
CVE-2005-4712 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354358 - - - Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenTP1 system outage) via invalid data to a port used by a system-server process, an… NVD-CWE-Other
CVE-2005-4716 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354359 - mozilla firefox Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an IFRAME element with a large value of the WIDTH attribute, which triggers a proble… NVD-CWE-Other
CVE-2005-4720 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
354360 - geeklog geeklog Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID. NVD-CWE-Other
CVE-2005-4725 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm