Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231561 6.9 警告 winpcap - WinPcap の NPF.SYS における権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2007-5756 2012-12-20 18:33 2007-11-13 Show GitHub Exploit DB Packet Storm
231562 6.8 警告 phpfaber - phpFaber URLInn の urlinn_includes/config.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5754 2012-12-20 18:33 2007-10-31 Show GitHub Exploit DB Packet Storm
231563 9 危険 wesnoth - Wesnoth 用の WML engine preprocessor におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-5742 2012-12-20 18:33 2007-11-27 Show GitHub Exploit DB Packet Storm
231564 7.5 危険 Plone Foundation - Plone における任意の Python コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5741 2012-12-20 18:33 2007-11-7 Show GitHub Exploit DB Packet Storm
231565 7.5 危険 vergenet - Perdition Mail Retrieval Proxy の IMAPD における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2007-5740 2012-12-20 18:33 2007-10-31 Show GitHub Exploit DB Packet Storm
231566 6.4 警告 seeblick - SeeBlick の upload.php における任意のファイルをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5736 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
231567 4.3 警告 phpPgAdmin - phpPgAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5728 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
231568 4.3 警告 smart-shop - Smart-Shop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5725 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
231569 6.8 警告 profilecms - ProfileCMS の profiles スクリプトにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5720 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
231570 4.9 警告 vobcopy - vobcopy における任意のファイルへデータを追加される脆弱性 CWE-59
リンク解釈の問題 		CVE-2007-5718 2012-12-20 18:33 2007-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347391 - comersus_open_technologies comersus_backoffice_lite comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program. NVD-CWE-Other
CVE-2005-0301 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347392 - comersus_open_technologies comersus_backoffice_lite SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header. NVD-CWE-Other
CVE-2005-0302 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347393 - comersus_open_technologies comersus_backoffice_lite Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_supportError.asp or (2) comersus_backofficelite_supportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject a… NVD-CWE-Other
CVE-2005-0303 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347394 - divx divx_player Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename in a ZIP file for a skin. NVD-CWE-Other
CVE-2005-0304 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347395 - siteman siteman CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation. NVD-CWE-Other
CVE-2005-0305 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347396 - mercuryboard mercuryboard MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting e… NVD-CWE-Other
CVE-2005-0306 2017-07-11 10:32 2005-01-25 Show GitHub Exploit DB Packet Storm
347397 - mercuryboard mercuryboard Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6)… NVD-CWE-Other
CVE-2005-0307 2017-07-11 10:32 2005-01-25 Show GitHub Exploit DB Packet Storm
347398 - ursoftware w32dasm Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name. NVD-CWE-Other
CVE-2005-0308 2017-07-11 10:32 2005-01-24 Show GitHub Exploit DB Packet Storm
347399 - exponent exponent Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module parameter. NVD-CWE-Other
CVE-2005-0309 2017-07-11 10:32 2005-01-25 Show GitHub Exploit DB Packet Storm
347400 - exponent exponent Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) fi… NVD-CWE-Other
CVE-2005-0310 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm