Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227581 7.5 危険 techno dreams - Techno Dreams Articles & Papers Package の ArticlesTableview.asp における SQL インジェクションの脆弱性 - CVE-2006-4891 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
227582 7.5 危険 unak - UNAK-CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4890 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
227583 5.1 警告 telekorn - Telekorn SL における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4889 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
227584 7.5 危険 shadowed portal - Shadowed Portal における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4885 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
227585 5 警告 phpquiz - Walter Beschmout PhpQuiz における重要な情報を取得される脆弱性 - CVE-2006-4865 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
227586 4.3 警告 roller weblogger - Roller WebLogger におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4856 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
227587 4.9 警告 シマンテック - Symantec Norton Personal Firewall などの \Device\SymEvent ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2006-4855 2012-12-20 18:02 2006-09-19 Show GitHub Exploit DB Packet Storm
227588 7.5 危険 quadcomm - QuadComm Q-Shop の browse.asp における SQL インジェクションの脆弱性 - CVE-2006-4852 2012-12-20 18:02 2006-09-18 Show GitHub Exploit DB Packet Storm
227589 5 警告 ソフォス - Sophos Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4839 2012-12-20 18:02 2006-11-1 Show GitHub Exploit DB Packet Storm
227590 7.5 危険 phpquiz - Jule Slootbeek phpQuiz の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4834 2012-12-20 18:02 2006-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198201 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a user supplied sparse image, a buffer overflow vulnerability could oc… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-11080 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198202 9.8 CRITICAL
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can potentially be flashed due… CWE-200
Information Exposure
CVE-2017-11079 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198203 7.5 HIGH
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing ubi image an uninitialized memory could be accessed. CWE-200
Information Exposure
CVE-2017-11066 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198204 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, manipulation of SafeSwitch Image data can result in Heap overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-11069 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198205 7.8 HIGH
Local
trendmicro encryption_for_email A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system. CWE-426
 Untrusted Search Path
CVE-2017-11397 2024-11-21 12:07 2017-12-16 Show GitHub Exploit DB Packet Storm
198206 6.5 MEDIUM
Network
adobe
redhat
flash_player
flash_player_desktop_runtime
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data. NVD-CWE-noinfo
CVE-2017-11305 2024-11-21 12:07 2017-12-14 Show GitHub Exploit DB Packet Storm
198207 8.8 HIGH
Network
resolver perspective Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and m… CWE-269
 Improper Privilege Management
CVE-2017-11319 2024-11-21 12:07 2017-12-12 Show GitHub Exploit DB Packet Storm
198208 6.1 MEDIUM
Network
check_mk_project check_mk A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScrip… CWE-79
Cross-site Scripting
CVE-2017-11507 2024-11-21 12:07 2017-12-12 Show GitHub Exploit DB Packet Storm
198209 8.8 HIGH
Network
ivanti endpoint_manager In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belonging to other users. … CWE-275
 Permission Issues
CVE-2017-11463 2024-11-21 12:07 2017-12-11 Show GitHub Exploit DB Packet Storm
198210 9.8 CRITICAL
Network
adobe photoshop An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. Successful exploitation could lead to arbitrary code execution. CWE-416
 Use After Free
CVE-2017-11304 2024-11-21 12:07 2017-12-9 Show GitHub Exploit DB Packet Storm