Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203851 7.5 重要
Network
openSUSE project
Atheme.org
- Atheme の modules/transport/xmlrpc/xmlrpclib.c の xmlrpc_char_encode 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4478 2016-06-17 16:36 2016-01-10 Show GitHub Exploit DB Packet Storm
203852 7.5 重要
Network
openSUSE project
Atheme.org
- Atheme の modules/chanserv/flags.c における Anope FLAGS の動作を変更される脆弱性 CWE-Other
その他
CVE-2014-9773 2016-06-17 16:36 2014-11-2 Show GitHub Exploit DB Packet Storm
203853 4.3 警告
Network
OpenStack - OpenStack Identity の Fernet Token Provider におけるトークンのチェーンの失効を制限される脆弱性 CWE-Other
その他
CVE-2016-4911 2016-06-17 16:36 2016-05-23 Show GitHub Exploit DB Packet Storm
203854 7.5 重要
Network
openSUSE project
Fedora Project
Quassel IRC
- Quassel の core/coreauthhandler.cpp の onReadyRead 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-4414 2016-06-17 16:17 2016-05-17 Show GitHub Exploit DB Packet Storm
203855 9.1 緊急
Network
openSUSE project
Fedora Project
OCaml
- OCaml におけるバッファオーバーフロー攻撃を実行される脆弱性 CWE-119
CWE-200
CVE-2015-8869 2016-06-17 16:09 2015-10-20 Show GitHub Exploit DB Packet Storm
203856 7.5 重要
Network
BMC Software - Linux および UNIX 上で稼動する BMC BladeLogic Server Automation の RSCD エージェントの RPC API における認証を回避される脆弱性 CWE-Other
その他
CVE-2016-1543 2016-06-17 15:53 2016-04-25 Show GitHub Exploit DB Packet Storm
203857 7.5 重要
Network
BMC Software - Linux および UNIX 上で稼動する BMC BladeLogic Server Automation の RSCD エージェントの RPC API における認証を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1542 2016-06-17 15:53 2016-04-25 Show GitHub Exploit DB Packet Storm
203858 5 警告
Local
マイクロソフト - 複数の Microsoft Windows 製品の Windows Search コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3230 2016-06-17 14:56 2016-06-14 Show GitHub Exploit DB Packet Storm
203859 6.5 警告
Network
マイクロソフト - Microsoft Windows Server 2008 および 2012 の Active Directory におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3226 2016-06-17 14:56 2016-06-14 Show GitHub Exploit DB Packet Storm
203860 7.8 重要
Local
マイクロソフト - Windows 診断ハブ標準コレクターサービスにおける権限昇格の脆弱性 CWE-Other
その他
CVE-2016-3231 2016-06-17 14:56 2016-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348901 - accomplishtechnology phpmydirectory Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenan… CWE-79
Cross-site Scripting
CVE-2006-4755 2012-10-22 13:00 2006-09-14 Show GitHub Exploit DB Packet Storm
348902 - accomplishtechnology phpmydirectory SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter. NOTE: the provenance of this informa… CWE-89
SQL Injection
CVE-2006-4756 2012-10-22 13:00 2006-09-14 Show GitHub Exploit DB Packet Storm
348903 - plogger plogger SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to index.php and (2) page parameter. CWE-89
SQL Injection
CVE-2005-4246 2012-10-22 13:00 2005-12-14 Show GitHub Exploit DB Packet Storm
348904 - plogger plogger Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. CWE-79
Cross-site Scripting
CVE-2005-4247 2012-10-22 13:00 2005-12-14 Show GitHub Exploit DB Packet Storm
348905 - k5n webcalendar Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to inject arbitrary web script or HTML via the (1) tab parameter to u… CWE-79
Cross-site Scripting
CVE-2010-0636 2012-10-13 11:58 2010-02-13 Show GitHub Exploit DB Packet Storm
348906 - k5n webcalendar Multiple cross-site request forgery (CSRF) vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests th… CWE-352
 Origin Validation Error
CVE-2010-0637 2012-10-13 11:58 2010-02-13 Show GitHub Exploit DB Packet Storm
348907 - html2ps_project html2ps Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input." NVD-CWE-noinfo
CVE-2002-1275 2012-10-11 13:00 2002-11-12 Show GitHub Exploit DB Packet Storm
348908 - colony colony_cms
colony_e-commerce_cms
colony_enterprise_cms
colony_government_cms
Cross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. CWE-79
Cross-site Scripting
CVE-2005-4386 2012-08-6 13:00 2005-12-20 Show GitHub Exploit DB Packet Storm
348909 - secureideas basic_analysis_and_security_engine Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[1] parame… CWE-79
Cross-site Scripting
CVE-2009-4837 2012-07-3 13:00 2010-05-6 Show GitHub Exploit DB Packet Storm
348910 - secureideas basic_analysis_and_security_engine SQL injection vulnerability in base_ag_common.php in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NO… CWE-89
SQL Injection
CVE-2009-4838 2012-07-3 13:00 2010-05-6 Show GitHub Exploit DB Packet Storm