Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238041 7.5 危険 minigal - MiniGal の classes.php における任意の PHP コードを挿入される脆弱性 - CVE-2007-2145 2012-09-25 16:47 2007-04-19 Show GitHub Exploit DB Packet Storm
238042 6.8 警告 joomlapack - Joomla! 用の jpack コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2144 2012-09-25 16:47 2007-04-19 Show GitHub Exploit DB Packet Storm
238043 10 危険 IBM - IBM Tivoli Monitoring Express の kde.dll におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2137 2012-09-25 16:47 2007-04-22 Show GitHub Exploit DB Packet Storm
238044 7.8 危険 オラクル - Oracle E-Business Suite の ADI_BINARY コンポーネントにおける脆弱性 - CVE-2007-2135 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
238045 7.2 危険 オラクル - Oracle JD Edwards EnterpriseOne の HTML Server における脆弱性 - CVE-2007-2134 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
238046 10 危険 オラクル - Oracle PeopleSoft Enterprise の PeopleSoft Enterprise Human Capital Management コンポーネントにおける脆弱性 - CVE-2007-2133 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
238047 10 危険 オラクル - Oracle PeopleSoft Enterprise の PeopleTools コンポーネントにおける脆弱性 - CVE-2007-2132 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
238048 10 危険 オラクル - Oracle PeopleSoft Enterprise の PeopleTools における脆弱性 - CVE-2007-2131 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
238049 9 危険 オラクル - Oracle E-Business Suite の Sales Online コンポーネントにおける脆弱性 - CVE-2007-2128 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
238050 10 危険 オラクル - Oracle E-Business Suite における脆弱性 CWE-noinfo
情報不足 		CVE-2007-2127 2012-09-25 16:47 2007-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346731 - pico_server pico_server Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root. NVD-CWE-Other
CVE-2005-1367 2016-10-18 12:19 2005-05-16 Show GitHub Exploit DB Packet Storm
346732 - mandrakesoft mandrake_lam-runtime The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges. NVD-CWE-Other
CVE-2005-1379 2016-10-18 12:19 2005-05-3 Show GitHub Exploit DB Packet Storm
346733 - apple safari Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference. NVD-CWE-Other
CVE-2005-1385 2016-10-18 12:19 2005-05-3 Show GitHub Exploit DB Packet Storm
346734 - francisco_burzi php-nuke PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php… NVD-CWE-Other
CVE-2005-1386 2016-10-18 12:19 2005-05-3 Show GitHub Exploit DB Packet Storm
346735 - kristofer_szymanski cocktail Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing … NVD-CWE-Other
CVE-2005-1387 2016-10-18 12:19 2005-05-3 Show GitHub Exploit DB Packet Storm
346736 - esri arcinfo_workstation Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or… NVD-CWE-Other
CVE-2005-1393 2016-10-18 12:19 2005-05-3 Show GitHub Exploit DB Packet Storm
346737 - rsa securid_web_agent Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data. NVD-CWE-Other
CVE-2005-1471 2016-10-18 12:19 2005-05-6 Show GitHub Exploit DB Packet Storm
346738 - oracle database_server SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAM… NVD-CWE-Other
CVE-2005-1197 2016-10-18 12:18 2005-05-2 Show GitHub Exploit DB Packet Storm
346739 - anaconda_partners foundation_directory Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters (%00) in the middle of ".." sequences … NVD-CWE-Other
CVE-2005-1198 2016-10-18 12:18 2005-05-2 Show GitHub Exploit DB Packet Storm
346740 - infopop ultimate_bulletin_board SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter. NVD-CWE-Other
CVE-2005-1199 2016-10-18 12:18 2005-05-2 Show GitHub Exploit DB Packet Storm