Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239711 3.5 注意 WordPress.org - WordPress の wp-admin/plugins.php におけるプラグインを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4422 2012-09-19 11:24 2012-09-6 Show GitHub Exploit DB Packet Storm
239712 4 警告 WordPress.org - WordPress の wp-includes/class-wp-atom-server.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4421 2012-09-19 11:24 2012-09-6 Show GitHub Exploit DB Packet Storm
239713 6.5 警告 WordPress.org - WordPress の xmlrpc.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-5106 2012-09-19 11:23 2010-12-8 Show GitHub Exploit DB Packet Storm
239714 6.8 警告 サイバーリンク株式会社 - Power2Go にバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5171 2012-09-19 10:41 2011-12-12 Show GitHub Exploit DB Packet Storm
239715 2.6 注意 マイクロソフト - Windows Phone 7 に SSL サーバ証明書の検証不備の脆弱性 CWE-310
暗号の問題 		CVE-2012-2993 2012-09-19 10:39 2012-09-18 Show GitHub Exploit DB Packet Storm
239716 7.5 危険 CoSoSys Ltd - Endpoint Protector 4 の認証機能に脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2994 2012-09-19 10:37 2012-09-18 Show GitHub Exploit DB Packet Storm
239717 3.5 注意 シスコシステムズ - Cisco IOS の SSLVPN の実装におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-DesignError
CVE-2012-3924 2012-09-18 16:57 2012-09-16 Show GitHub Exploit DB Packet Storm
239718 3.5 注意 シスコシステムズ - Cisco IOS の SSLVPN の実装におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3923 2012-09-18 16:56 2012-09-16 Show GitHub Exploit DB Packet Storm
239719 5 警告 シスコシステムズ - 複数の Cisco 製品で使用される Cisco ACE モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3919 2012-09-18 16:54 2012-09-16 Show GitHub Exploit DB Packet Storm
239720 5 警告 シスコシステムズ - Cisco IOS の DMVPN トンネルの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-3915 2012-09-18 16:54 2012-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346611 - phpbb_group phpbb PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code. NVD-CWE-Other
CVE-2005-2086 2016-10-18 12:24 2005-07-5 Show GitHub Exploit DB Packet Storm
346612 - drupal drupal Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting. NVD-CWE-Other
CVE-2005-2106 2016-10-18 12:24 2005-07-5 Show GitHub Exploit DB Packet Storm
346613 - phpcms phpcms Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the la… NVD-CWE-Other
CVE-2005-1840 2016-10-18 12:23 2005-06-2 Show GitHub Exploit DB Packet Storm
346614 - ekg ekg Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916. NVD-CWE-Other
CVE-2005-1850 2016-10-18 12:23 2005-07-19 Show GitHub Exploit DB Packet Storm
346615 - ekg ekg A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors. NVD-CWE-Other
CVE-2005-1851 2016-10-18 12:23 2005-07-19 Show GitHub Exploit DB Packet Storm
346616 - popper popper PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PHP code via the form parameter. NVD-CWE-Other
CVE-2005-1870 2016-10-18 12:23 2005-06-9 Show GitHub Exploit DB Packet Storm
346617 - drupal drupal Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not impl… NVD-CWE-Other
CVE-2005-1871 2016-10-18 12:23 2005-06-9 Show GitHub Exploit DB Packet Storm
346618 - ibm websphere_application_server Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2005-1872 2016-10-18 12:23 2005-06-3 Show GitHub Exploit DB Packet Storm
346619 - exhibit_engine exhibit_engine Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row, (2) sort_row, (3) order or (4) perpage … NVD-CWE-Other
CVE-2005-1875 2016-10-18 12:23 2005-06-2 Show GitHub Exploit DB Packet Storm
346620 - rakkarsoft raknet Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Elite Warriors: Vietnam, allows remote attackers to cause a de… NVD-CWE-Other
CVE-2005-1899 2016-10-18 12:23 2005-06-9 Show GitHub Exploit DB Packet Storm