Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210761 5 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの SSL VPN の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-3407 2014-12-1 15:43 2014-11-26 Show GitHub Exploit DB Packet Storm
210762 5 警告 Paid Memberships Pro - WordPress 用 Paid Memberships Pro プラグインの services/getfile.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-8801 2014-12-1 15:21 2014-11-14 Show GitHub Exploit DB Packet Storm
210763 5 警告 DukaPress - WordPress 用 DukaPress プラグインの php/dp-functions.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-8799 2014-12-1 15:16 2014-11-12 Show GitHub Exploit DB Packet Storm
210764 3.5 注意 apptha.com - WordPress 用 Apptha WordPress Video Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9098 2014-12-1 15:08 2014-07-15 Show GitHub Exploit DB Packet Storm
210765 7.5 危険 apptha.com - WordPress 用 Apptha WordPress Video Gallery プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-9097 2014-12-1 14:39 2014-07-23 Show GitHub Exploit DB Packet Storm
210766 7.5 危険 Pligg - Pligg CMS の recover.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-9096 2014-12-1 14:27 2014-07-31 Show GitHub Exploit DB Packet Storm
210767 7.5 危険 ラリタン・ジャパン株式会社 - Raritan Power IQ における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-9095 2014-12-1 14:17 2014-07-16 Show GitHub Exploit DB Packet Storm
210768 7.5 危険 The Document Foundation - LibreOffice におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-9093 2014-12-1 13:52 2014-11-19 Show GitHub Exploit DB Packet Storm
210769 4.3 警告 Digital Zoom Studio - WordPress 用 Digital Zoom Studio Video Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9094 2014-12-1 13:32 2014-05-8 Show GitHub Exploit DB Packet Storm
210770 7.2 危険 Wibu-Systems AG - Wibu-Systems CodeMeter Runtime における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-8419 2014-12-1 11:56 2014-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293861 - emc vmware Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbitrary local programs via a full pathname in the first two a… NVD-CWE-Other
CVE-2007-4155 2017-09-29 10:29 2007-08-4 Show GitHub Exploit DB Packet Storm
293862 - hp address_and_routing_parameter_area\(arpa\)_transport Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknow… NVD-CWE-Other
CVE-2007-4179 2017-09-29 10:29 2007-08-8 Show GitHub Exploit DB Packet Storm
293863 - php_arena pabugs SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. NVD-CWE-Other
CVE-2007-4183 2017-09-29 10:29 2007-08-8 Show GitHub Exploit DB Packet Storm
293864 - dovecot dovecot The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command. NVD-CWE-Other
CVE-2007-4211 2017-09-29 10:29 2007-08-8 Show GitHub Exploit DB Packet Storm
293865 - idevspot phphostbot PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svr_rootscript parameter, a d… NVD-CWE-Other
CVE-2007-4231 2017-09-29 10:29 2007-08-9 Show GitHub Exploit DB Packet Storm
293866 - andreas_robertz phpnews PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote attackers to execute arbitrary PHP code via a URL in the format_menue parameter. NVD-CWE-Other
CVE-2007-4232 2017-09-29 10:29 2007-08-9 Show GitHub Exploit DB Packet Storm
293867 - chilkat_software asp_string Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full path… NVD-CWE-Other
CVE-2007-4252 2017-09-29 10:29 2007-08-9 Show GitHub Exploit DB Packet Storm
293868 - chilkat_software asp_string More detailed information listed here: http://www.securityfocus.com/bid/25205/info NVD-CWE-Other
CVE-2007-4252 2017-09-29 10:29 2007-08-9 Show GitHub Exploit DB Packet Storm
293869 - microsoft visual_database_tools_database_designer
visual_studio 		Stack-based buffer overflow in a certain ActiveX control in VDT70.DLL in Microsoft Visual Database Tools Database Designer 7.0 for Microsoft Visual Studio 6 allows remote attackers to execute arbitra… NVD-CWE-Other
CVE-2007-4254 2017-09-29 10:29 2007-08-9 Show GitHub Exploit DB Packet Storm
293870 - ynp portal_systems Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the p parameter. NVD-CWE-Other
CVE-2007-4256 2017-09-29 10:29 2007-08-9 Show GitHub Exploit DB Packet Storm