Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211241	6.8	警告	シスコシステムズ	-	複数の Cisco デバイス上で稼働する Cisco IOS XE における Linux の root アクセス権を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2014-7990	2014-11-10 16:52	2014-11-6	Show	GitHub Exploit DB Packet Storm

211242	6.8	警告	シスコシステムズ	-	Cisco Unified Computing System B シリーズブレードサーバにおけるシェルの権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2014-7989	2014-11-10 16:51	2014-11-6	Show	GitHub Exploit DB Packet Storm

211243	4	警告	シスコシステムズ	-	Cisco Unity Connection の Unified Messaging Service における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-7988	2014-11-10 16:51	2014-11-5	Show	GitHub Exploit DB Packet Storm

211244	10	危険	SAP	-	SAP CRM 用 SAP Promotion Guidelines モジュールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-8669	2014-11-10 16:27	2014-10-23	Show	GitHub Exploit DB Packet Storm

211245	7.5	危険	SAP	-	SAP Contract Accounting における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-8668	2014-11-10 16:27	2014-10-23	Show	GitHub Exploit DB Packet Storm

211246	4.3	警告	SAP	-	SAP HANA Web-based Development Workbench におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8667	2014-11-10 16:27	2014-10-23	Show	GitHub Exploit DB Packet Storm

211247	5	警告	SAP	-	SAP Business Intelligence Development Workbench における監査イベントの詳細を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-8666	2014-11-10 16:26	2014-10-23	Show	GitHub Exploit DB Packet Storm

211248	5	警告	SAP	-	SAP Business Intelligence Development Workbench における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-8665	2014-11-10 16:26	2014-10-23	Show	GitHub Exploit DB Packet Storm

211249	7.5	危険	SAP	-	SAP Environment, Health, and Safety Management の Product Safety コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-8664	2014-11-10 16:26	2014-10-23	Show	GitHub Exploit DB Packet Storm

211250	7.5	危険	SAP	-	SAP NetWeaver Business Warehouse の Data Basis における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-8663	2014-11-10 16:25	2014-10-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307191	-	novell	edirectory	Heap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3 have unknown impact and attack vectors related to the (1) HTTP language header and (2) HTTP content-lengt…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-5092	2012-10-31 12:06	2008-11-15	Show	GitHub Exploit DB Packet Storm

307192	-	novell	edirectory	Heap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown impact and attack vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-5094	2012-10-31 12:06	2008-11-15	Show	GitHub Exploit DB Packet Storm

307193	-	novell	identity_manager_roles_based_provisioning_module user_application	Cross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1; and Identity Manager Roles Based Provisioning Module 3.6.0 and 3.6.1 allows remote attackers to inject…	CWE-79 Cross-site Scripting	CVE-2008-5095	2012-10-31 12:06	2008-11-15	Show	GitHub Exploit DB Packet Storm

307194	-	adobe	adobe_air	Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors.	NVD-CWE-noinfo CWE-94 Code Injection	CVE-2008-5108	2012-10-31 12:06	2008-11-18	Show	GitHub Exploit DB Packet Storm

307195	-	freebsd	freebsd-sendpr	sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr.##### temporary file.	CWE-59 Link Following	CVE-2008-5142	2012-10-31 12:06	2008-11-19	Show	GitHub Exploit DB Packet Storm

307196	-	dann_frazier	systemimager-server	si_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/.inetd.conf or (2) /tmp/pxe.conf..tmp temporary file.	CWE-59 Link Following	CVE-2008-5156	2012-10-31 12:06	2008-11-19	Show	GitHub Exploit DB Packet Storm

307197	-	apple	safari	The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive information via vectors that "launch …	CWE-200 Information Exposure	CVE-2008-4216	2012-10-31 12:04	2008-11-18	Show	GitHub Exploit DB Packet Storm

307198	-	hp	service_manager	Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknown vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-4415	2012-10-31 12:04	2008-11-18	Show	GitHub Exploit DB Packet Storm

307199	-	apple	safari	Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser…	CWE-200 Information Exposure	CVE-2008-3644	2012-10-31 12:01	2008-11-18	Show	GitHub Exploit DB Packet Storm

307200	-	gnome	screensaver	The notify feature in GNOME screensaver (gnome-screensaver) 2.20.0 might allow local users to read the clipboard contents and X selection data for a locked session by using ctrl-V.	NVD-CWE-Other	CVE-2007-6389	2012-10-31 11:48	2007-12-18	Show	GitHub Exploit DB Packet Storm