Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
206271 9 危険 General Electric Company - GE Industrial Solutions UPS SNMP/Web アダプタデバイスのファームウェアにおける任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2016-0861 2016-02-22 15:09 2016-01-27 Show GitHub Exploit DB Packet Storm
206272 7.5 危険 Atlassian - Atlassian Bamboo の不特定のリソースにおける任意の Java コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-8360 2016-02-22 11:55 2015-11-25 Show GitHub Exploit DB Packet Storm
206273 7.5 危険 Atlassian - Atlassian Bamboo で使用される Ignite Realtime Smack XMPP API における任意の Java コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-9757 2016-02-22 11:55 2016-01-12 Show GitHub Exploit DB Packet Storm
206274 7.5 危険 SAP - SAP NetWeaver J2EE Engine の UDDI サーバにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-2386 2016-02-22 10:43 2016-02-9 Show GitHub Exploit DB Packet Storm
206275 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の WebDAV クライアントにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-0051 2016-02-19 17:56 2016-02-9 Show GitHub Exploit DB Packet Storm
206276 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の Windows Reader における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0046 2016-02-19 17:55 2016-02-9 Show GitHub Exploit DB Packet Storm
206277 4.3 警告 マイクロソフト - Microsoft Internet Explorer 9 から 11 における同一生成元ポリシーを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-0005 2016-02-19 17:55 2016-01-12 Show GitHub Exploit DB Packet Storm
206278 5 警告 シスコシステムズ - Cisco Small Business SG300 デバイス上で稼動する Web 管理の GUI の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1299 2016-02-19 17:43 2016-01-27 Show GitHub Exploit DB Packet Storm
206279 5 警告 Ipswitch, Inc. - Ipswitch MOVEit DMZ におけるユーザ名を列挙される脆弱性 CWE-200
情報漏えい 		CVE-2015-7680 2016-02-19 15:41 2015-10-20 Show GitHub Exploit DB Packet Storm
206280 4.3 警告 Ipswitch, Inc. - Ipswitch MOVEit Mobile におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-7679 2016-02-19 15:41 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347961 - duware duforum SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail… NVD-CWE-Other
CVE-2004-2201 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347962 - duware duclassified Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (… NVD-CWE-Other
CVE-2004-2202 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347963 - ansel ansel Ansel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain access to web readable directories. NVD-CWE-Other
CVE-2004-2203 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347964 - macromedia coldfusion Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administ… NVD-CWE-Other
CVE-2004-2204 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347965 - symantec_veritas cluster_server Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors. NVD-CWE-Other
CVE-2004-2205 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347966 - natterchat natterchat SQL injection vulnerability in NatterChat 1.12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2004-2206 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347967 - alivesites alivesites_forum Cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) forum_id, (2) method, or (3) forum_title parameters to pos… NVD-CWE-Other
CVE-2004-2211 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347968 - alivesites alivesites_forum SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forum_id parameter. NVD-CWE-Other
CVE-2004-2212 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347969 - mbedthis_software mbedthis_appweb_http_server Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request. NVD-CWE-Other
CVE-2004-2213 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
347970 - marc_lehmann rxvt-unicode RXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to access the terminals of other users and possibly gain privileges. NVD-CWE-Other
CVE-2004-2215 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm