Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219111	9.3	危険	シスコシステムズ	-	Cisco WebEx Advanced Recording Format player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1116	2013-09-9 14:55	2013-09-4	Show	GitHub Exploit DB Packet Storm

219112	9.3	危険	シスコシステムズ	-	Cisco WebEx Advanced Recording Format player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-1115	2013-09-9 14:54	2013-09-4	Show	GitHub Exploit DB Packet Storm

219113	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Logging に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3749	2013-09-6 18:22	2013-07-16	Show	GitHub Exploit DB Packet Storm

219114	4	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack における Client System Analyzer に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3747	2013-09-6 18:20	2013-07-16	Show	GitHub Exploit DB Packet Storm

219115	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle iSupplier Portal における Supplier Management に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3788	2013-09-6 18:19	2013-07-16	Show	GitHub Exploit DB Packet Storm

219116	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Applications Technology Stack における Help に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3778	2013-09-6 18:18	2013-07-16	Show	GitHub Exploit DB Packet Storm

219117	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library における Signon に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3777	2013-09-6 18:12	2013-07-16	Show	GitHub Exploit DB Packet Storm

219118	4.3	警告	オラクル	-	Oracle E-Business Suite Access Gate の Oracle Application Object Library における脆弱性	CWE-noinfo 情報不足	CVE-2013-3767	2013-09-6 18:10	2013-07-16	Show	GitHub Exploit DB Packet Storm

219119	5.5	警告	オラクル	-	Oracle E-Business Suite の Oracle Landed Cost Management における Shipment Workbench に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3756	2013-09-6 18:06	2013-07-16	Show	GitHub Exploit DB Packet Storm

219120	4.3	警告	Open-Xchange	-	Open-Xchange Server における平文のパスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2013-1649	2013-09-6 16:51	2013-03-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278371	-	xpdf	xpdf	Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDe…	NVD-CWE-noinfo CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-3627	2018-10-20 00:37	2005-12-31	Show	GitHub Exploit DB Packet Storm

278372	-	easy_software_products kde libextractor poppler sgi tetex xpdf conectiva debian gentoo mandrakesoft redhat sco slackware suse trustix turbolinux ubuntu	cups kdegraphics koffice kpdf kword libextractor poppler propack tetex xpdf linux debian_linux mandrake_linux mandrake_linux_corporate_server enterprise_linu…	Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely…	CWE-399 Resource Management Errors	CVE-2005-3625	2018-10-20 00:37	2005-12-31	Show	GitHub Exploit DB Packet Storm

278373	-	easy_software_products kde libextractor poppler sgi tetex xpdf conectiva debian gentoo mandrakesoft redhat sco slackware suse trustix turbolinux ubuntu	cups kdegraphics koffice kpdf kword libextractor poppler propack tetex xpdf linux debian_linux mandrake_linux mandrake_linux_corporate_server enterprise_linu…	Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that tr…	CWE-399 Resource Management Errors	CVE-2005-3626	2018-10-20 00:37	2005-12-31	Show	GitHub Exploit DB Packet Storm

278374	-	saphp	saphplesson	SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2…	NVD-CWE-Other	CVE-2005-3363	2018-10-20 00:36	2005-10-30	Show	GitHub Exploit DB Packet Storm

278375	-	codeworx_technologies	dcp-portal	Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in regis…	CWE-89 SQL Injection	CVE-2005-3365	2018-10-20 00:36	2005-10-30	Show	GitHub Exploit DB Packet Storm

278376	-	trend_micro	officescan pc-cillin_2005	Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning…	NVD-CWE-Other	CVE-2005-3379	2018-10-20 00:36	2005-10-30	Show	GitHub Exploit DB Packet Storm

278377	-	oaboard	oaboard	Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel parameter in the topics module and (2) topic para…	NVD-CWE-Other	CVE-2005-3394	2018-10-20 00:36	2005-11-1	Show	GitHub Exploit DB Packet Storm

278378	-	invision_power_services	invision_gallery	SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.	NVD-CWE-Other	CVE-2005-3395	2018-10-20 00:36	2005-11-1	Show	GitHub Exploit DB Packet Storm

278379	-	elite_forum	elite_forum	Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: U…	NVD-CWE-Other	CVE-2005-3412	2018-10-20 00:36	2005-11-2	Show	GitHub Exploit DB Packet Storm

278380	-	alexander_palmo	simple_php_blog	Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry, (2) blog_subject, and (3) blo…	NVD-CWE-Other	CVE-2005-3473	2018-10-20 00:36	2005-11-3	Show	GitHub Exploit DB Packet Storm