Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201371 6.1 警告
Network
Plone Foundation - Plone CMS の z3c.form におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-7136 2017-03-29 16:11 2016-08-30 Show GitHub Exploit DB Packet Storm
201372 4.9 警告
Network
Plone Foundation - Plone CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-7135 2017-03-29 16:11 2016-08-30 Show GitHub Exploit DB Packet Storm
201373 7.8 重要
Local
FreeType Project - FreeType 2 の type1/t1load.c の parse_charstrings 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-10244 2017-03-29 15:59 2016-09-8 Show GitHub Exploit DB Packet Storm
201374 6.1 警告
Network
GNU Project - Wget の url.c の url_parse 関数における CRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2017-6508 2017-03-29 15:43 2017-03-6 Show GitHub Exploit DB Packet Storm
201375 8.8 重要
Network
D-Link Systems, Inc. - D-Link DSL-2730U デバイスにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-6411 2017-03-29 15:39 2017-03-6 Show GitHub Exploit DB Packet Storm
201376 5.5 警告
Local
The Qt Company - Qt の QXmlSimpleReader におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-10040 2017-03-29 15:30 2016-12-24 Show GitHub Exploit DB Packet Storm
201377 5.5 警告
Local
Artifex Software
Debian
- Ghostscript の getenv および filenameforall 関数におけるデータを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-5653 2017-03-29 15:15 2013-10-21 Show GitHub Exploit DB Packet Storm
201378 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/modules/filedownloads/controllers/filedownloadController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9087 2017-03-29 15:00 2016-09-29 Show GitHub Exploit DB Packet Storm
201379 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/modules/help/controllers/helpController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9020 2017-03-29 15:00 2016-09-29 Show GitHub Exploit DB Packet Storm
201380 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/modules/addressbook/controllers/addressController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9019 2017-03-29 15:00 2016-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343851 - xli
altlinux
suse
xli
alt_linux
suse_linux
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling t… NVD-CWE-Other
CVE-2005-0638 2018-10-20 00:31 2005-03-2 Show GitHub Exploit DB Packet Storm
343852 - stadtaus tell_a_friend_script PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parame… CWE-94
Code Injection
CVE-2005-0679 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343853 - microsoft windows_2003_server
windows_xp
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destinatio… NVD-CWE-Other
CVE-2005-0688 2018-10-20 00:31 2005-03-5 Show GitHub Exploit DB Packet Storm
343854 - argosoft ftp_server Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5. NVD-CWE-Other
CVE-2005-0696 2018-10-20 00:31 2005-03-8 Show GitHub Exploit DB Packet Storm
343855 - mcnews mcnews PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote … CWE-94
Code Injection
CVE-2005-0720 2018-10-20 00:31 2005-03-8 Show GitHub Exploit DB Packet Storm
343856 - linux linux_kernel ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash). CWE-399
 Resource Management Errors
CVE-2005-0756 2018-10-20 00:31 2005-06-8 Show GitHub Exploit DB Packet Storm
343857 - openslp openslp Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets. NVD-CWE-Other
CVE-2005-0769 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343858 - platinumftp platinumftpserver PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \ (backslash) in the username. NVD-CWE-Other
CVE-2005-0779 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343859 - mcnews mcnews PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web … NVD-CWE-Other
CVE-2005-0800 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343860 - subdreamer subdreamer_light SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as globa… NVD-CWE-Other
CVE-2005-0805 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm