Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202401 4.3 警告 アドビシステムズ
日立		 - Adobe ColdFusion および LiveCycle Data Services で使用される Adobe BlazeDS における HTTP トラフィックをイントラネットサーバへ送信される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5255 2016-03-24 17:24 2015-11-17 Show GitHub Exploit DB Packet Storm
202402 5 警告 アドビシステムズ
日立		 - Adobe LiveCycle Data Services などの製品の flex-messaging-core.jar で使用される Apache Flex BlazeDS における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-3269 2016-03-24 17:23 2015-08-18 Show GitHub Exploit DB Packet Storm
202403 6.8 警告 XZERES Wind Corp - XZERES 442SR Wind Turbines 上で稼働する XZERES 442SR OS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-0985 2016-03-24 17:23 2015-03-17 Show GitHub Exploit DB Packet Storm
202404 5.5 警告 Matt Johnston - Dropbear SSH における CRLF インジェクションの脆弱性 CWE-Other
その他 		CVE-2016-3116 2016-03-24 11:22 2016-03-9 Show GitHub Exploit DB Packet Storm
202405 10 危険 ヒューレット・パッカード - HP Support Assistant における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2016-2245 2016-03-24 11:08 2016-03-7 Show GitHub Exploit DB Packet Storm
202406 10 危険 ヒューレット・パッカード・エンタープライズ - HPE Service Manager における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1998 2016-03-24 11:08 2016-03-21 Show GitHub Exploit DB Packet Storm
202407 10 危険 ヒューレット・パッカード・エンタープライズ - HPE Operations Orchestration および Operations Orchestration コンテンツにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1997 2016-03-24 11:08 2016-03-16 Show GitHub Exploit DB Packet Storm
202408 7.6 危険 Quagga - Quagga にバッファオーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2016-2342 2016-03-23 17:55 2016-03-10 Show GitHub Exploit DB Packet Storm
202409 4.9 警告 Samba Project - Samba の内部 DNS サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-0771 2016-03-23 17:44 2016-03-8 Show GitHub Exploit DB Packet Storm
202410 4 警告 Samba Project - Samba の smbd の SMB1 の実装における任意の ACL を変更される脆弱性 CWE-Other
その他 		CVE-2015-7560 2016-03-23 17:44 2015-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347711 - osticket osticket_sts SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable. NVD-CWE-Other
CVE-2005-2153 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
347712 - osticket osticket_sts PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc pa… NVD-CWE-Other
CVE-2005-2154 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
347713 - phpnews phpnews SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter. NVD-CWE-Other
CVE-2005-2156 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
347714 - globalnotescript globalnotescript read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameters. NVD-CWE-Other
CVE-2005-2165 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
347715 - kaf_oseo quick_and_dirty_phpsource_printer Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, whi… NVD-CWE-Other
CVE-2005-2169 2008-09-6 05:51 2005-07-6 Show GitHub Exploit DB Packet Storm
347716 - mozilla bugzilla The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to… NVD-CWE-Other
CVE-2005-2173 2008-09-6 05:51 2005-07-8 Show GitHub Exploit DB Packet Storm
347717 - mozilla bugzilla Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access info… NVD-CWE-Other
CVE-2005-2174 2008-09-6 05:51 2005-07-8 Show GitHub Exploit DB Packet Storm
347718 - ibm lotus_notes The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based att… NVD-CWE-Other
CVE-2005-2175 2008-09-6 05:51 2005-07-9 Show GitHub Exploit DB Packet Storm
347719 - apple airport_card The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network. NVD-CWE-Other
CVE-2005-2196 2008-09-6 05:51 2005-07-19 Show GitHub Exploit DB Packet Storm
347720 - spid spid PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter. NVD-CWE-Other
CVE-2005-2198 2008-09-6 05:51 2005-07-11 Show GitHub Exploit DB Packet Storm