Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227821	5.1	警告	gonafish	-	Gonafish LinksCaffe の links.php における SQL インジェクションの脆弱性	-	CVE-2006-3932	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

227822	4.6	警告	tuomas airaksinen	-	Tuomas Airaksinen Midirecord の midirecord.cc におけるバッファオーバーフローの脆弱性	-	CVE-2006-3931	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

227823	7.5	危険	mamboxchange	-	a6mambohelpdesk Mambo コンポーネントの admin.a6mambohelpdesk.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3930	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

227824	4.3	警告	ZyXEL	-	Zyxel Prestige 660H-61 ADSL ルータの Forms/rpSysAdmin スクリプトにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3929	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

227825	7.5	危険	mikael software	-	WMNews の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3928	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

227826	4.3	警告	phpprobid	-	PhpProBid の auctionsearch.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3927	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

227827	7.5	危険	phpprobid	-	PhpProBid における SQL インジェクションの脆弱性	-	CVE-2006-3926	2012-12-20 18:02	2006-07-31	Show	GitHub Exploit DB Packet Storm

227828	6.4	警告	interactual technologies	-	InterActual Player の iarecord.dll におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3925	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

227829	2.6	注意	fire-mouse	-	Fire-Mouse Toplist の add.php におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3923	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

227830	7.5	危険	portailphp	-	PortailPHP の mod_membre/inscription.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3922	2012-12-20 18:02	2006-07-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197671	8.8	HIGH Network	eyesofnetwork	eyesofnetwork	In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell…	CWE-78 OS Command	CVE-2017-14118	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197672	5.9	MEDIUM Network	att	u-verse_firmware	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows rem…	CWE-287 Improper Authentication	CVE-2017-14117	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197673	8.1	HIGH Network	att	u-verse_firmware	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, …	CWE-798 Use of Hard-coded Credentials	CVE-2017-14116	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197674	8.1	HIGH Network	att	u-verse_firmware	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5S…	CWE-798 Use of Hard-coded Credentials	CVE-2017-14115	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197675	6.5	MEDIUM Network	rtpproxy	rtpproxy	RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers…	CWE-200 Information Exposure	CVE-2017-14114	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197676	9.8	CRITICAL Network	digium	asterisk certified_asterisk	In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. Th…	CWE-78 OS Command	CVE-2017-14100	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197677	7.5	HIGH Network	digium	asterisk	In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.	CWE-20 Improper Input Validation	CVE-2017-14098	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197678	7.5	HIGH Network	netapp	oncommand_unified_manager_for_clustered_data_ontap	NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to captur…	CWE-200 Information Exposure	CVE-2017-14053	2024-11-21 12:12	2017-09-2	Show	GitHub Exploit DB Packet Storm

197679	7.5	HIGH Network	digium	asterisk certified_asterisk	In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data di…	CWE-200 Information Exposure	CVE-2017-14099	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197680	6.5	MEDIUM Network	libzip debian	libzip debian_linux	The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2017-14107	2024-11-21 12:12	2017-09-2	Show	GitHub Exploit DB Packet Storm