Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201481 7.5 重要
Network
OpenStack - 複数の OpenStack 製品のイメージパーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-5162 2016-10-19 16:26 2015-04-27 Show GitHub Exploit DB Packet Storm
201482 7.8 重要
Local
インテル - Intel SSD Toolbox の updater サブシステムにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8101 2016-10-19 14:19 2016-10-4 Show GitHub Exploit DB Packet Storm
201483 5.5 警告
Local
インテル - Intel Integrated Performance Primitives Cryptography における RSA 秘密鍵を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-8100 2016-10-19 14:19 2016-10-4 Show GitHub Exploit DB Packet Storm
201484 7.8 重要
Local
マイクロソフト - Microsoft Windows 10 の Windows 診断ハブの標準コレクターサービスにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-7188 2016-10-18 18:11 2016-10-11 Show GitHub Exploit DB Packet Storm
201485 9.8 緊急
Network
マイクロソフト - 複数の Microsoft 製品の Graphics コンポーネントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-7182 2016-10-18 18:11 2016-10-11 Show GitHub Exploit DB Packet Storm
201486 7.8 重要
Local
マイクロソフト - 複数の Microsoft 製品の Graphics Device Interface における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3396 2016-10-18 18:11 2016-10-11 Show GitHub Exploit DB Packet Storm
201487 7.8 重要
Local
マイクロソフト - 複数の Microsoft Windows 製品のカーネルの Graphics コンポーネントにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3270 2016-10-18 18:11 2016-10-11 Show GitHub Exploit DB Packet Storm
201488 5.5 警告
Local
マイクロソフト - 複数の Microsoft 製品の Graphics Device Interface における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2016-3263 2016-10-18 18:11 2016-10-11 Show GitHub Exploit DB Packet Storm
201489 5.5 警告
Local
マイクロソフト - 複数の Microsoft 製品の Graphics Device Interface における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2016-3262 2016-10-18 18:11 2016-10-11 Show GitHub Exploit DB Packet Storm
201490 5.5 警告
Local
マイクロソフト - 複数の Microsoft 製品の Graphics Device Interface における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2016-3209 2016-10-18 18:11 2016-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345981 - adobe acrobat
acrobat_reader
Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that… NVD-CWE-Other
CVE-2004-0632 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
345982 - aol instant_messenger Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message. NVD-CWE-Other
CVE-2004-0636 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345983 - oracle oracle8i
oracle9i
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2004-0638 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
345984 - open_webmail
sgi
squirrelmail
open_webmail
propack
squirrelmail
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the… NVD-CWE-Other
CVE-2004-0639 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
345985 - netkit
ssltelnetd
linux_netkit
secure_telnet
Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0640 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
345986 - thomson speedtouch Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijac… NVD-CWE-Other
CVE-2004-0641 2017-07-11 10:30 2004-08-5 Show GitHub Exploit DB Packet Storm
345987 - abisource
wvware
community_abiword
wvware
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime fiel… NVD-CWE-Other
CVE-2004-0645 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
345988 - macromedia coldfusion
jrun
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to… NVD-CWE-Other
CVE-2004-0646 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
345989 - shorewall shorewall shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file. NVD-CWE-Other
CVE-2004-0647 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
345990 - mozilla firefox
mozilla
thunderbird
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol. NVD-CWE-Other
CVE-2004-0648 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm