Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252651 5.1 警告 Claroline Consortium
Dokeos		 - Dokeos などの製品で使用される Claroline の inc/claro_init_local.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4844 2012-06-26 15:37 2006-09-18 Show GitHub Exploit DB Packet Storm
252652 4.3 警告 codeworx technologies - DCP-Portal SE におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4838 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
252653 7.5 危険 codeworx technologies - DCP-Portal SE における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4837 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
252654 5.1 警告 codeworx technologies - DCP-Portal SE の login.php における SQL インジェクションの脆弱性 - CVE-2006-4836 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
252655 5 警告 bluview - Bluview BMB における重要な情報を取得される脆弱性 - CVE-2006-4835 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
252656 10 危険 blojsom - David Czarnecki Blojsom の EditBlogTemplatesPlugin.java におけるディレクトリトラバーサルの脆弱性 - CVE-2006-4830 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
252657 6.8 警告 blojsom - David Czarnecki Blojsom におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4829 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
252658 4.3 警告 emusoft - eMuSOFT emuCMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4822 2012-06-26 15:37 2006-09-15 Show GitHub Exploit DB Packet Storm
252659 4.3 警告 Drupal - Drupal の Userreview モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4821 2012-06-26 15:37 2006-09-13 Show GitHub Exploit DB Packet Storm
252660 5.1 警告 Enlightenment - imlib2 の loader_pnm.c におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4809 2012-06-26 15:37 2006-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264621 5.5 MEDIUM
Local 		sam2p_project sam2p In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because "width * height" multiplications occur unsafely. CWE-190
 Integer Overflow or Wraparound 		CVE-2017-16663 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264622 4.9 MEDIUM
Network 		cacti cacti Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by file… CWE-200
Information Exposure 		CVE-2017-16661 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264623 7.2 HIGH
Network 		cacti cacti Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP … CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2017-16660 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264624 7.8 HIGH
Local 		anti-spam_smtp_proxy_project anti-spam_smtp_proxy The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl scrip… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-16659 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264625 9.8 CRITICAL
Network 		owlmixin_project owlmixin An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python c… NVD-CWE-noinfo
CVE-2017-16618 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264626 9.8 CRITICAL
Network 		pyanyapi_project pyanyapi An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting… NVD-CWE-noinfo
CVE-2017-16616 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264627 9.8 CRITICAL
Network 		mlalchemy_project mlalchemy An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser… NVD-CWE-noinfo
CVE-2017-16615 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264628 6.6 MEDIUM
Physics 		linux linux_kernel The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or possibly have u… CWE-369
 Divide By Zero 		CVE-2017-16650 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264629 6.6 MEDIUM
Physics 		linux linux_kernel The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero error and system crash) or poss… CWE-369
 Divide By Zero 		CVE-2017-16649 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm
264630 6.6 MEDIUM
Physics 		linux linux_kernel The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (use-after-free and system crash) or possib… CWE-416
 Use After Free 		CVE-2017-16648 2024-11-21 12:16 2017-11-8 Show GitHub Exploit DB Packet Storm