Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201881 9.8 緊急
Network 		Vim - Vim における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2017-5953 2017-03-7 17:33 2017-02-10 Show GitHub Exploit DB Packet Storm
201882 6.1 警告
Network 		Inverse inc. - SOGo の Web Calendar の View Raw Source ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6191 2017-03-7 17:13 2016-06-8 Show GitHub Exploit DB Packet Storm
201883 4.3 警告
Network 		Inverse inc. - SOGo における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-6190 2017-03-7 17:13 2016-05-27 Show GitHub Exploit DB Packet Storm
201884 4.3 警告
Network 		Inverse inc. - SOGo における重要な情報を取得される脆弱性 CWE-184
不完全なブラックリスト 		CVE-2016-6189 2017-03-7 17:13 2016-05-27 Show GitHub Exploit DB Packet Storm
201885 6.1 警告
Network 		Inverse inc. - SOGo の Web Calendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9905 2017-03-7 17:12 2014-02-4 Show GitHub Exploit DB Packet Storm
201886 5.5 警告
Local 		libdwarf project - libdwarf の dwarf_util.c の _dwarf_get_abbrev_for_code 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-8681 2017-03-7 17:10 2016-10-17 Show GitHub Exploit DB Packet Storm
201887 5.5 警告
Local 		libdwarf project - libdwarf の dwarf_util.c の _dwarf_get_abbrev_for_code 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-8680 2017-03-7 17:10 2016-10-17 Show GitHub Exploit DB Packet Storm
201888 5.5 警告
Local 		libdwarf project - libdwarf の libdwarf/dwarf_util.c の _dwarf_get_size_of_val 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-8679 2017-03-7 17:10 2016-10-4 Show GitHub Exploit DB Packet Storm
201889 5.5 警告
Local 		libdwarf project - libdwarf の dwarf_die_deliv.c における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2016-7511 2017-03-7 17:10 2016-09-18 Show GitHub Exploit DB Packet Storm
201890 6.5 警告
Network 		libdwarf project - libdwarf の dwarf_line_table_reader_common.c の read_line_table_program 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-7510 2017-03-7 17:10 2016-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288831 9.8 CRITICAL
Network 		status2k status2k A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code. CWE-20
 Improper Input Validation  		CVE-2014-5091 2024-11-21 11:11 2020-02-8 Show GitHub Exploit DB Packet Storm
288832 9.8 CRITICAL
Network 		sphider
sphider-plus
sphiderpro 		sphider
sphider-plus
sphider_pro 		A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code. CWE-20
 Improper Input Validation  		CVE-2014-5087 2024-11-21 11:11 2020-02-8 Show GitHub Exploit DB Packet Storm
288833 8.8 HIGH
Network 		kemptechnologies load_master A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages. CWE-352
 Origin Validation Error 		CVE-2014-5288 2024-11-21 11:11 2020-02-8 Show GitHub Exploit DB Packet Storm
288834 7.5 HIGH
Network 		open-xchange open-xchange_appsuite Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files vi… CWE-22
Path Traversal 		CVE-2014-5236 2024-11-21 11:11 2020-02-1 Show GitHub Exploit DB Packet Storm
288835 9.6 CRITICAL
Network 		eucalyptus eucalyptus_management_console Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2014-5039 2024-11-21 11:11 2020-02-1 Show GitHub Exploit DB Packet Storm
288836 6.8 MEDIUM
Physics 		tianocore edk2 Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended acce… CWE-190
 Integer Overflow or Wraparound 		CVE-2014-4860 2024-11-21 11:11 2020-02-1 Show GitHub Exploit DB Packet Storm
288837 6.8 MEDIUM
Physics 		tianocore edk2 Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restri… CWE-190
 Integer Overflow or Wraparound 		CVE-2014-4859 2024-11-21 11:11 2020-02-1 Show GitHub Exploit DB Packet Storm
288838 9.8 CRITICAL
Network 		zohocorp manageengine_desktop_central
manageengine_desktop_central_managed_service_providers 		Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows rem… CWE-22
Path Traversal 		CVE-2014-5007 2024-11-21 11:11 2020-01-18 Show GitHub Exploit DB Packet Storm
288839 7.8 HIGH
Local 		open-xchange open-xchange_appsuite XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified imp… CWE-611
XXE 		CVE-2014-5238 2024-11-21 11:11 2020-01-15 Show GitHub Exploit DB Packet Storm
288840 7.5 HIGH
Network 		iii sierra Innovative Interfaces Sierra Library Services Platform 1.2_3 does not properly handle query strings with multiple instances of the same parameter, which allows remote attackers to bypass parameter va… NVD-CWE-Other
CVE-2014-5138 2024-11-21 11:11 2020-01-15 Show GitHub Exploit DB Packet Storm