Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202531 7.2 重要
Network 		MetalGenix - GeniXCMS の inc/mod/newsletter/options.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-5347 2017-01-24 14:36 2017-01-15 Show GitHub Exploit DB Packet Storm
202532 7.2 重要
Network 		MetalGenix - GeniXCMS の inc/lib/Control/Backend/posts.control.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-5346 2017-01-24 14:36 2017-01-15 Show GitHub Exploit DB Packet Storm
202533 8.8 重要
Network 		MetalGenix - GeniXCMS の inc/lib/Control/Ajax/tags-ajax.control.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-5345 2017-01-24 14:36 2017-01-9 Show GitHub Exploit DB Packet Storm
202534 9.8 緊急
Network 		LibTIFF - LibTIFF の tools/tiffcp におけるヒープバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-5225 2017-01-24 14:24 2017-01-12 Show GitHub Exploit DB Packet Storm
202535 9.8 緊急
Network 		The PHP Group - PHP における任意のコードを実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2016-7479 2017-01-24 14:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202536 7.5 重要
Network 		サムスン - Samsung Note デバイスのソフトウェアにおけるシステムクラッシュを引き起こされる脆弱性 CWE-400
リソースの枯渇 		CVE-2017-5351 2017-01-24 13:54 2017-01-12 Show GitHub Exploit DB Packet Storm
202537 7.5 重要
Network 		サムスン - Samsung Note デバイスのソフトウェアにおける systemUI のクラッシュを引き起こされる脆弱性 CWE-388
エラー処理 		CVE-2017-5350 2017-01-24 13:54 2017-01-12 Show GitHub Exploit DB Packet Storm
202538 9.8 緊急
Network 		British Columbia Institute of Technology - CodeIgniter の system/libraries/Email.php における任意のコードを実行される脆弱性 CWE-74
インジェクション 		CVE-2016-10131 2017-01-24 13:53 2016-12-27 Show GitHub Exploit DB Packet Storm
202539 5.3 警告
Local 		Google - Telephony における権限昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6771 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
202540 5.5 警告
Local 		Google - メディアサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-6767 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345381 - inter7 vpopmail Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL usernam… NVD-CWE-Other
CVE-2001-0990 2017-12-19 11:29 2001-09-4 Show GitHub Exploit DB Packet Storm
345382 - scott_r._lemmon proxomitron_naoko-4 Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious scrip… NVD-CWE-Other
CVE-2001-0991 2017-12-19 11:29 2001-07-24 Show GitHub Exploit DB Packet Storm
345383 - kabotie_software_technologies shopplus_cart shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter. NVD-CWE-Other
CVE-2001-0992 2017-12-19 11:29 2001-09-5 Show GitHub Exploit DB Packet Storm
345384 - marconi forethought Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from log… NVD-CWE-Other
CVE-2001-0994 2017-12-19 11:29 2001-09-4 Show GitHub Exploit DB Packet Storm
345385 - pop3lite pop3lite POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpret… NVD-CWE-Other
CVE-2001-0996 2017-12-19 11:29 2001-09-2 Show GitHub Exploit DB Packet Storm
345386 - textor_webmasters_ltd. listrec.pl Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter. NVD-CWE-Other
CVE-2001-0997 2017-12-19 11:29 2001-09-11 Show GitHub Exploit DB Packet Storm
345387 - microsoft outlook_express Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain… NVD-CWE-Other
CVE-2001-0999 2017-12-19 11:29 2001-09-12 Show GitHub Exploit DB Packet Storm
345388 - merit aaa_radius_server rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file. NVD-CWE-Other
CVE-2001-1000 2017-12-19 11:29 2001-09-7 Show GitHub Exploit DB Packet Storm
345389 - suse suse_linux Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/. NVD-CWE-Other
CVE-2001-1012 2017-12-19 11:29 2001-09-5 Show GitHub Exploit DB Packet Storm
345390 - redhat linux Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, whic… NVD-CWE-Other
CVE-2001-1013 2017-12-19 11:29 2001-09-12 Show GitHub Exploit DB Packet Storm