Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201701 6.1 警告
Network
SANADATA - SANADATA SanaCMS の index.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5882 2017-02-14 12:00 2017-02-4 Show GitHub Exploit DB Packet Storm
201702 5.5 警告
Local
Linux - Linux Kernel の drivers/usb/serial/kl5kusb105.c における重要な情報を取得される脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2017-5549 2017-02-14 11:31 2017-01-20 Show GitHub Exploit DB Packet Storm
201703 6.5 警告
Local
Linux - Linux Kernel の arch/x86/kvm/vmx.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-2596 2017-02-14 11:31 2017-02-6 Show GitHub Exploit DB Packet Storm
201704 4.3 警告
Physics
Linux - Linux Kernel の fs/ext4/super.c の ext4_fill_super 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-10208 2017-02-14 11:31 2016-12-1 Show GitHub Exploit DB Packet Storm
201705 5.5 警告
Local
OpenJPEG project
Fedora Project
- OpenJPEG の tcd.c の opj_tcd_init_tile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-369
ゼロ除算
CVE-2016-4797 2017-02-14 11:04 2016-05-9 Show GitHub Exploit DB Packet Storm
201706 5.5 警告
Local
OpenJPEG project
Fedora Project
- OpenJPEG の common/color.c の color_cmyk_to_rgb におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4796 2017-02-14 11:04 2016-05-9 Show GitHub Exploit DB Packet Storm
201707 5.5 警告
Local
OpenJPEG project - OpenJPEG の common/color.c の sycc422_t_rgb 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-3183 2017-02-14 11:04 2016-04-30 Show GitHub Exploit DB Packet Storm
201708 7.5 重要
Network
Artifex Software
Fedora Project
- Artifex Software, Inc. の MuJS の regexp.c の js_regcomp 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9108 2017-02-14 10:57 2016-10-31 Show GitHub Exploit DB Packet Storm
201709 6.1 警告
Network
WordPress.org - WordPress の投稿リストテーブルの wp-admin/includes/class-wp-posts-list-table.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5612 2017-02-13 17:32 2017-01-26 Show GitHub Exploit DB Packet Storm
201710 9.8 緊急
Network
WordPress.org - WordPress の WP_Query の wp-includes/class-wp-query.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5611 2017-02-13 17:32 2017-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289091 - esri arcgis_server Multiple cross-site scripting (XSS) vulnerabilities in ESRI ArcGIS for Server 10.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting
CVE-2014-5121 2024-11-21 11:11 2014-08-22 Show GitHub Exploit DB Packet Storm
289092 - freereprintables articlefr Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) get or (2) set action to… CWE-89
SQL Injection
CVE-2014-5097 2024-11-21 11:11 2014-08-22 Show GitHub Exploit DB Packet Storm
289093 - phpmyadmin
opensuse
phpmyadmin
opensuse
Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2014-5274 2024-11-21 11:11 2014-08-22 Show GitHub Exploit DB Packet Storm
289094 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web scrip… CWE-79
Cross-site Scripting
CVE-2014-5273 2024-11-21 11:11 2014-08-22 Show GitHub Exploit DB Packet Storm
289095 - shopizer shopizer com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, which makes it easier for remote attackers to guess password… CWE-287
Improper Authentication
CVE-2014-5385 2024-11-21 11:11 2014-08-22 Show GitHub Exploit DB Packet Storm
289096 - freebsd
netbsd
freebsd
netbsd
The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a crafted argument to… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-5384 2024-11-21 11:11 2014-08-22 Show GitHub Exploit DB Packet Storm
289097 - alienvault open_source_security_information_management SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2014-5383 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
289098 - alienvault open_source_security_information_management The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability … CWE-94
Code Injection
CVE-2014-5210 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
289099 - alienvault open_source_security_information_management SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter. CWE-89
SQL Injection
CVE-2014-5159 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
289100 - alienvault open_source_security_information_management The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors. CWE-94
Code Injection
CVE-2014-5158 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm