Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204051 7.8 重要
Local
Apache Software Foundation - Apache PDFBox における XML 外部エンティティ攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-2175 2016-06-3 14:29 2016-04-17 Show GitHub Exploit DB Packet Storm
204052 6.1 警告
Network
シトリックス・システムズ - Citrix NetScaler Gateway の vpn/js/gateway_login_form_view.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4945 2016-06-3 14:16 2016-05-26 Show GitHub Exploit DB Packet Storm
204053 7.5 重要
Network
シトリックス・システムズ - Citrix XenDesktop および XenApp 用 Citrix Studio における XenDesktop Delivery Controller にアクセスポリシー規則を設定される脆弱性 CWE-Other
その他
CVE-2016-4810 2016-06-3 14:16 2016-05-31 Show GitHub Exploit DB Packet Storm
204054 7.8 重要
Local
Debian
GNOME Project
- gdk-pixbuf の pixops/pixops.c の pixops_composite_nearest などの関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-8875 2016-06-3 12:17 2015-10-6 Show GitHub Exploit DB Packet Storm
204055 6.5 警告
Network
IBM - IBM Security AppScan における任意のファイルを読まれる脆弱性 CWE-Other
その他
CVE-2016-0288 2016-06-3 11:41 2016-05-17 Show GitHub Exploit DB Packet Storm
204056 7 危険 サイボウズ - サイボウズ ガルーンにおける LDAP インジェクションの脆弱性 CWE-noinfo
情報不足
CVE-2015-5649 2016-06-2 19:12 2015-10-7 Show GitHub Exploit DB Packet Storm
204057 4.3 警告
Network
Apache Software Foundation - Apache Cordova におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5207 2016-06-2 17:49 2016-05-11 Show GitHub Exploit DB Packet Storm
204058 9.8 緊急
Network
Sixnet - Sixnet BT-5xxx および BT-6xxx M2M デバイスにおけるアクセス権を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-4521 2016-06-2 16:55 2016-05-26 Show GitHub Exploit DB Packet Storm
204059 5.8 警告
Network
Moxa Inc. - Moxa UC-7408 LX-Plus デバイスにおけるファームウェアに書き込まれる脆弱性 CWE-Other
その他
CVE-2016-4500 2016-06-2 15:00 2016-05-31 Show GitHub Exploit DB Packet Storm
204060 7.5 重要
Network
Moxa Inc. - 複数の Moxa MiiNePort デバイス製品のファームウェアにおける重要な平文情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2295 2016-06-2 15:00 2016-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349391 - jonathan_bravata scarecrow Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to (1) forum.cgi and (2) post.cgi, or (3)… NVD-CWE-Other
CVE-2005-4307 2011-03-8 11:27 2005-12-17 Show GitHub Exploit DB Packet Storm
349392 - ssh tectia_server SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials. NVD-CWE-Other
CVE-2005-4310 2011-03-8 11:27 2005-12-17 Show GitHub Exploit DB Packet Storm
349393 - dcscripts dcforum
dcforum\+
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.p… NVD-CWE-Other
CVE-2005-4311 2011-03-8 11:27 2005-12-17 Show GitHub Exploit DB Packet Storm
349394 - - - SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2005-4312 2011-03-8 11:27 2005-12-17 Show GitHub Exploit DB Packet Storm
349395 - ppcal_shopping_cart ppcal_shopping_cart Cross-site scripting (XSS) vulnerability in ppcal.cgi in PPCal Shopping Cart 3.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) stop and (2) user parameters. NVD-CWE-Other
CVE-2005-4314 2011-03-8 11:27 2005-12-17 Show GitHub Exploit DB Packet Storm
349396 - sourcefire snort Stack-based buffer overflow in the Back Orifice (BO) preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet. NVD-CWE-Other
CVE-2005-3252 2011-03-8 11:26 2005-10-19 Show GitHub Exploit DB Packet Storm
349397 - avaya
proxim
wireless_ap-3
wireless_ap-4
wireless_ap-5
wireless_ap-6
wireless_ap-7
wireless_ap-8
ap-2000
ap-4000
ap-600
ap-700
Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-400… NVD-CWE-Other
CVE-2005-3253 2011-03-8 11:26 2005-12-16 Show GitHub Exploit DB Packet Storm
349398 - squid squid The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE11 and earlier allows remote FTP servers to cause a denial of service (segmentation fault) via certain "odd" responses. NVD-CWE-Other
CVE-2005-3258 2011-03-8 11:26 2005-10-20 Show GitHub Exploit DB Packet Storm
349399 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) left.php, (2) queryframe.… NVD-CWE-Other
CVE-2005-3301 2011-03-8 11:26 2005-10-24 Show GitHub Exploit DB Packet Storm
349400 - clam_anti-virus clamav The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file. NVD-CWE-Other
CVE-2005-3303 2011-03-8 11:26 2005-11-5 Show GitHub Exploit DB Packet Storm