Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201391	9.8	緊急 Network	MetalGenix	-	GeniXCMS の author.control.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-5517	2017-01-26 09:57	2017-01-14	Show	GitHub Exploit DB Packet Storm

201392	6.1	警告 Network	MetalGenix	-	GeniXCMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5516	2017-01-26 09:57	2017-01-13	Show	GitHub Exploit DB Packet Storm

201393	5.4	警告 Network	MetalGenix	-	GeniXCMS の user prompt 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5515	2017-01-26 09:57	2017-01-13	Show	GitHub Exploit DB Packet Storm

201394	5.4	警告 Network	b2evolution	-	b2evolution のファイルタイプテーブルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5494	2017-01-25 17:08	2017-01-17	Show	GitHub Exploit DB Packet Storm

201395	8	重要 Network	CMS Made Simple	-	CMS Made Simple におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-7904	2017-01-25 17:07	2016-09-9	Show	GitHub Exploit DB Packet Storm

201396	7	重要 Local	Linux	-	NVIDIA GPU ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8449	2017-01-25 16:07	2016-09-28	Show	GitHub Exploit DB Packet Storm

201397	7	重要 Local	Linux	-	NVIDIA GPU ドライバにおける権限を昇格される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-8435	2017-01-25 16:07	2016-11-7	Show	GitHub Exploit DB Packet Storm

201398	7.8	重要 Local	Linux	-	NVIDIA GPU ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8432	2017-01-25 16:07	2016-10-26	Show	GitHub Exploit DB Packet Storm

201399	7.8	重要 Local	Linux	-	NVIDIA GPU ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8431	2017-01-25 16:07	2016-10-25	Show	GitHub Exploit DB Packet Storm

201400	7.8	重要 Local	Linux	-	NVIDIA GPU ドライバにおける権限を昇格される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8430	2017-01-25 16:07	2016-10-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289731	-	caldera	caldera	Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname.	CWE-22 Path Traversal	CVE-2014-2933	2024-11-21 11:07	2014-05-8	Show	GitHub Exploit DB Packet Storm

289732	-	xen	xen	The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separa…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3124	2024-11-21 11:07	2014-05-7	Show	GitHub Exploit DB Packet Storm

289733	-	opensuse nagios	opensuse remote_plugin_executor	Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote attackers to execute arbitrary commands via a newline character in the -a option to…	NVD-CWE-Other	CVE-2014-2913	2024-11-21 11:07	2014-05-7	Show	GitHub Exploit DB Packet Storm

289734	-	debian strongswan	strongswan	strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload.	NVD-CWE-Other	CVE-2014-2891	2024-11-21 11:07	2014-05-7	Show	GitHub Exploit DB Packet Storm

289735	-	ayatana_project canonical	unity ubuntu_linux	Unity before 7.2.1, as used in Ubuntu 14.04, does not properly handle keyboard shortcuts, which allows physically proximate attackers to bypass the lock screen and execute arbitrary commands, as demo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3204	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

289736	-	ayatana_project canonical	unity ubuntu_linux	Unity before 7.2.1, as used in Ubuntu 14.04, does not properly restrict access to the Dash when the lock screen is active, which allows physically proximate attackers to bypass the lock screen and ex…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3203	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

289737	-	ayatana_project	unity	Unity before 7.2.1 does not properly handle entry activation, which allows physically proximate attackers to bypass the lock screen by holding the ENTER key, which triggers the process to crash.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3202	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

289738	-	f5	big-iq	F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page in mgmt/shared/auth…	CWE-255 Credentials Management	CVE-2014-3220	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

289739	-	phplist	phplist	Cross-site request forgery (CSRF) vulnerability in the subscription page editor (spageedit) in phpList before 3.0.6 allows remote attackers to hijack the authentication of administrators via a reques…	CWE-352 Origin Validation Error	CVE-2014-2916	2024-11-21 11:07	2014-05-6	Show	GitHub Exploit DB Packet Storm

289740	-	xen	xen	Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash)…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3125	2024-11-21 11:07	2014-05-2	Show	GitHub Exploit DB Packet Storm