Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
205571 8.8 重要
Network 		Lenovo - Android 上で稼動する Lenovo SHAREit における脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4782 2016-05-27 16:41 2016-05-19 Show GitHub Exploit DB Packet Storm
205572 7.5 重要
Network 		Quagga
openSUSE project		 - Quagga の bgpd/bgp_dump.c の bgp_dump_routes_func 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4049 2016-05-27 16:06 2016-01-25 Show GitHub Exploit DB Packet Storm
205573 7.5 重要
Network 		openSUSE project
Fedora Project
The Go Project		 - Go の crypto/dsa/dsa.go の Verify 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-3959 2016-05-27 15:54 2016-04-6 Show GitHub Exploit DB Packet Storm
205574 7.8 重要
Local 		The Go Project - Windows 上で稼動する Go における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3958 2016-05-27 15:54 2016-04-2 Show GitHub Exploit DB Packet Storm
205575 7.4 重要
Network 		トレンドマイクロ - Apple iOS 用 Trend Micro Mobile Security におけるモバイルアプリケーションのログインサーバになりすまされる脆弱性 CWE-200
情報漏えい 		CVE-2016-3664 2016-05-27 15:03 2016-04-22 Show GitHub Exploit DB Packet Storm
205576 6.3 警告
Network 		エヌ・ティ・ティ・ブロードバンドプラットフォーム株式会社 - Japan Connected-free Wi-Fi におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5629 2016-05-27 12:12 2015-09-11 Show GitHub Exploit DB Packet Storm
205577 7.5 重要
Adjacent 		Huawei - 複数の Huawei デバイス製品のソフトウェアの Smart DNS 機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-4577 2016-05-27 11:23 2016-05-11 Show GitHub Exploit DB Packet Storm
205578 9.8 緊急
Network 		Huawei - 複数の Huawei デバイス製品のソフトウェアの Application Specific Packet Filtering 機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-4576 2016-05-27 11:23 2016-05-11 Show GitHub Exploit DB Packet Storm
205579 8.1 重要
Network 		Huawei - Huawei S12700 および S5700 スイッチのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4087 2016-05-27 11:23 2016-04-27 Show GitHub Exploit DB Packet Storm
205580 7.8 重要
Local 		Huawei - Huawei Mobile Broadband HL Service における SYSTEM 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-2855 2016-05-27 11:23 2016-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349941 - mozilla bugzilla SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary S… NVD-CWE-Other
CVE-2004-0707 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349942 - moinmoin moinmoin MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges. NVD-CWE-Other
CVE-2004-0708 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349943 - hp openview_select_access HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions. NVD-CWE-Other
CVE-2004-0709 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349944 - bea weblogic_server The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote … NVD-CWE-Other
CVE-2004-0711 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349945 - bea weblogic_server The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartex… NVD-CWE-Other
CVE-2004-0712 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349946 - bea weblogic_server The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permis… NVD-CWE-Other
CVE-2004-0713 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349947 - bea weblogic_server The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can c… NVD-CWE-Other
CVE-2004-0715 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349948 - apple safari Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame i… NVD-CWE-Other
CVE-2004-0720 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349949 - microsoft java_virtual_machine Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/K… NVD-CWE-Other
CVE-2004-0723 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm
349950 - valve_software half-life
half-life_dedicated_server 		The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet. NVD-CWE-Other
CVE-2004-0724 2017-07-11 10:30 2004-07-27 Show GitHub Exploit DB Packet Storm