Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209331 4.4 警告 Foxit Software Inc - Foxit Reader の Cloud プラグインの Foxit Cloud Safe Update Service における権限を取得される脆弱性 CWE-Other
その他
CVE-2015-2789 2015-04-2 18:02 2015-03-9 Show GitHub Exploit DB Packet Storm
209332 6.9 警告 Rockwell Automation - Rockwell Automation FactoryTalk Services Platform および FactoryTalk View Studio の Clean Utility アプリケーションにおける権限を取得される脆弱性 CWE-Other
その他
CVE-2014-9209 2015-04-2 17:44 2014-12-2 Show GitHub Exploit DB Packet Storm
209333 7.8 危険 レッドハット - slapi-nis プラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-0283 2015-04-2 17:19 2015-02-24 Show GitHub Exploit DB Packet Storm
209334 5 警告 MongoDB Inc. - MongoDB におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-1609 2015-04-2 17:19 2015-02-17 Show GitHub Exploit DB Packet Storm
209335 10 危険 SELinux - setroubleshoot の util.py の get_rpm_nvr_by_file_path_temporary 関数における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2015-1815 2015-04-2 17:19 2015-03-26 Show GitHub Exploit DB Packet Storm
209336 5 警告 レッドハット - FreeIPA の extdom プラグインの get_user_grouplist 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-1827 2015-04-2 17:19 2015-03-18 Show GitHub Exploit DB Packet Storm
209337 7.5 危険 Josh Lockhart - Slim の Middleware/SessionCookie.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2015-2171 2015-04-2 17:19 2015-03-1 Show GitHub Exploit DB Packet Storm
209338 6.5 警告 Andreas Gohr - DokuWiki における権限を取得される脆弱性 CWE-Other
その他
CVE-2015-2172 2015-04-2 17:19 2015-02-25 Show GitHub Exploit DB Packet Storm
209339 7.5 危険 OnTheGoSystems,Inc. - WordPress 用 WPML プラグインにおけるナンスのチェックを回避される脆弱性 CWE-Other
その他
CVE-2015-2792 2015-04-2 16:42 2015-03-11 Show GitHub Exploit DB Packet Storm
209340 6.4 警告 OnTheGoSystems,Inc. - WordPress 用 WPML プラグインの "menu sync" 関数における任意の記事などを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-2791 2015-04-2 16:42 2015-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347561 - socialmpn socialmpn Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to article.php, (2) uname parameter to user.php, (3) siteid para… NVD-CWE-Other
CVE-2005-2031 2008-09-6 05:50 2005-06-16 Show GitHub Exploit DB Packet Storm
347562 - fortibus fortibus_cms Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page. NVD-CWE-Other
CVE-2005-2038 2008-09-6 05:50 2005-06-20 Show GitHub Exploit DB Packet Storm
347563 - nanoblogger nanoblogger Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands. NVD-CWE-Other
CVE-2005-2039 2008-09-6 05:50 2005-06-19 Show GitHub Exploit DB Packet Storm
347564 - telnetd telnetd Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CV… NVD-CWE-Other
CVE-2005-2040 2008-09-6 05:50 2005-06-20 Show GitHub Exploit DB Packet Storm
347565 - ajax-spell ajax-spell Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags. NVD-CWE-Other
CVE-2005-2042 2008-09-6 05:50 2005-06-16 Show GitHub Exploit DB Packet Storm
347566 - xampp apache_distribution Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php. NVD-CWE-Other
CVE-2005-2043 2008-09-6 05:50 2005-06-17 Show GitHub Exploit DB Packet Storm
347567 - adaptive_technology_resource_centre atutor Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to browse.php, (2) sub… NVD-CWE-Other
CVE-2005-2044 2008-09-6 05:50 2005-06-16 Show GitHub Exploit DB Packet Storm
347568 - realnetworks realone_player
realplayer
Unknown vulnerability in RealPlayer 10 and 10.5 (6.0.12.1040-1069) and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafte… NVD-CWE-Other
CVE-2005-2054 2008-09-6 05:50 2005-06-29 Show GitHub Exploit DB Packet Storm
347569 - realnetworks realone_player
realplayer
RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settin… NVD-CWE-Other
CVE-2005-2055 2008-09-6 05:50 2005-06-29 Show GitHub Exploit DB Packet Storm
347570 - freebsd freebsd FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session. NVD-CWE-Other
CVE-2005-2068 2008-09-6 05:50 2005-07-5 Show GitHub Exploit DB Packet Storm