Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202951	7.8	重要 Local	Google Linux	-	Nexus 5X および 6P デバイス上で稼動する Android で使用される Linux kernel の arch/arm64/include/asm/pgtable.h における権限を取得される脆弱性	CWE-Other その他	CVE-2014-9803	2016-07-19 11:52	2016-07-6	Show	GitHub Exploit DB Packet Storm

202952	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの lib/libfdt/fdt.c における整数オーバーフローの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9802	2016-07-19 11:52	2016-07-6	Show	GitHub Exploit DB Packet Storm

202953	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの makefile における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9799	2016-07-19 11:52	2016-07-6	Show	GitHub Exploit DB Packet Storm

202954	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-4249	2016-07-15 17:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

202955	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-4248	2016-07-15 17:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

202956	5.9	警告 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における重要な情報を取得される脆弱性	CWE-362 競合状態	CVE-2016-4247	2016-07-15 17:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

202957	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4246	2016-07-15 17:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

202958	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4245	2016-07-15 17:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

202959	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4244	2016-07-15 17:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

202960	9.8	緊急 Network	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4243	2016-07-15 17:53	2016-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347101	-	php_arena	pafaq	Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) id parameters.	NVD-CWE-Other	CVE-2005-2012	2016-10-18 12:24	2005-06-20	Show	GitHub Exploit DB Packet Storm

347102	-	php_arena	pafaq	paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.	NVD-CWE-Other	CVE-2005-2013	2016-10-18 12:24	2005-06-20	Show	GitHub Exploit DB Packet Storm

347103	-	php_arena	pafaq	The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack.	NVD-CWE-Other	CVE-2005-2014	2016-10-18 12:24	2005-06-20	Show	GitHub Exploit DB Packet Storm

347104	-	mercuryboard	mercuryboard_message_board	SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.	NVD-CWE-Other	CVE-2005-2028	2016-10-18 12:24	2005-06-21	Show	GitHub Exploit DB Packet Storm

347105	-	ultimate_php_board	ultimate_php_board	Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE…	NVD-CWE-Other	CVE-2005-2030	2016-10-18 12:24	2005-06-16	Show	GitHub Exploit DB Packet Storm

347106	-	blue-collar_productions	i-gallery	Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary files and directories via the folder parameter.	CWE-22 Path Traversal	CVE-2005-2033	2016-10-18 12:24	2005-06-20	Show	GitHub Exploit DB Packet Storm

347107	-	blue-collar_productions	i-gallery	Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to inject arbitrary web script or HTML via the folder parameter.	NVD-CWE-Other	CVE-2005-2034	2016-10-18 12:24	2005-06-20	Show	GitHub Exploit DB Packet Storm

347108	-	duware	duportal_pro	Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to default.asp, (2) iData parameter to deta…	NVD-CWE-Other	CVE-2005-2045	2016-10-18 12:24	2005-06-22	Show	GitHub Exploit DB Packet Storm

347109	-	duware	duamazon_pro	Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp…	NVD-CWE-Other	CVE-2005-2046	2016-10-18 12:24	2005-06-22	Show	GitHub Exploit DB Packet Storm

347110	-	duware	dupaypal_pro	Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3)…	NVD-CWE-Other	CVE-2005-2047	2016-10-18 12:24	2005-06-22	Show	GitHub Exploit DB Packet Storm