Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201371 5.4 警告
Network
IBM - IBM Kenexa LMS on Cloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5940 2017-02-13 11:53 2016-06-29 Show GitHub Exploit DB Packet Storm
201372 6.3 警告
Network
IBM - IBM Kenexa LMS on Cloud における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-5939 2017-02-13 11:53 2016-10-12 Show GitHub Exploit DB Packet Storm
201373 3.3
Local
IBM - IBM Kenexa LMS on Cloud における Web ページをローカルに保存される脆弱性 CWE-200
情報漏えい
CVE-2016-5938 2017-02-13 11:53 2016-06-29 Show GitHub Exploit DB Packet Storm
201374 6.1 警告
Network
IBM - IBM iNotes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5881 2017-02-13 11:53 2016-06-29 Show GitHub Exploit DB Packet Storm
201375 6.1 警告
Network
IBM - IBM iNotes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5884 2017-02-13 11:53 2016-11-2 Show GitHub Exploit DB Packet Storm
201376 6.1 警告
Network
IBM - IBM iNotes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5882 2017-02-13 11:53 2016-11-2 Show GitHub Exploit DB Packet Storm
201377 5.4 警告
Network
IBM - IBM iNotes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5880 2017-02-13 11:53 2016-11-2 Show GitHub Exploit DB Packet Storm
201378 5.3 警告
Network
IBM - IBM AppScan Source における重要な情報を公開される脆弱性 CWE-200
情報漏えい
CVE-2016-3035 2017-02-13 11:53 2016-12-23 Show GitHub Exploit DB Packet Storm
201379 6.1 警告
Network
IBM - IBM Security Access Manager for Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3018 2017-02-13 11:53 2016-12-6 Show GitHub Exploit DB Packet Storm
201380 6.1 警告
Network
IBM - IBM iNotes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2939 2017-02-13 11:53 2016-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289541 - xoops glossaire_module SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter. CWE-89
SQL Injection
CVE-2014-3935 2024-11-21 11:09 2014-06-2 Show GitHub Exploit DB Packet Storm
289542 - phpnuke php-nuke
submit_news_module
SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php. CWE-89
SQL Injection
CVE-2014-3934 2024-11-21 11:09 2014-06-2 Show GitHub Exploit DB Packet Storm
289543 - newsignature addressfield_tokens Cross-site scripting (XSS) vulnerability in the address components field formatter in the AddressField Tokens module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbi… CWE-79
Cross-site Scripting
CVE-2014-3933 2024-11-21 11:09 2014-06-2 Show GitHub Exploit DB Packet Storm
289544 - cososys endpoint_protector SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands vi… CWE-89
SQL Injection
CVE-2014-3932 2024-11-21 11:09 2014-06-2 Show GitHub Exploit DB Packet Storm
289545 - canonical
redhat
ubuntu_linux
sos
sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing th… CWE-255
Credentials Management
CVE-2014-3925 2024-11-21 11:09 2014-06-1 Show GitHub Exploit DB Packet Storm
289546 - debian dpkg-dev Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pse… CWE-22
Path Traversal
CVE-2014-3865 2024-11-21 11:09 2014-05-31 Show GitHub Exploit DB Packet Storm
289547 - debian dpkg-dev Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header lin… CWE-22
Path Traversal
CVE-2014-3864 2024-11-21 11:09 2014-05-31 Show GitHub Exploit DB Packet Storm
289548 - webmin webmin
userwin
Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows. CWE-79
Cross-site Scripting
CVE-2014-3924 2024-11-21 11:09 2014-05-30 Show GitHub Exploit DB Packet Storm
289549 - digitalzoomstudio video_gallery Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink … CWE-79
Cross-site Scripting
CVE-2014-3923 2024-11-21 11:09 2014-05-30 Show GitHub Exploit DB Packet Storm
289550 - trendmicro interscan_messaging_security_virtual_appliance Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addW… CWE-79
Cross-site Scripting
CVE-2014-3922 2024-11-21 11:09 2014-05-30 Show GitHub Exploit DB Packet Storm