Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211271 4.3 警告 Meinberg Funkuhren GmbH & Co KG - LANTIME M-Series デバイス上で稼働する Meinberg NTP サーバファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5417 2014-11-7 15:35 2014-10-2 Show GitHub Exploit DB Packet Storm
211272 4.3 警告 Nordex - Nordex Control 2 SCADA デバイス上で稼働する Wind Farm Portal のログインスクリプトにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5408 2014-11-7 15:34 2014-10-30 Show GitHub Exploit DB Packet Storm
211273 6.5 警告 AITpro - WordPress 用 BulletProof Security プラグインの admin/htaccess/bpsunlock.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-7959 2014-11-7 15:28 2014-11-5 Show GitHub Exploit DB Packet Storm
211274 4.3 警告 AITpro - WordPress 用 BulletProof Security プラグインの admin/htaccess/bpsunlock.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7958 2014-11-7 15:27 2014-11-5 Show GitHub Exploit DB Packet Storm
211275 4.3 警告 Wordfence.com - WordPress 用 Wordfence Security プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4664 2014-11-7 15:27 2014-06-30 Show GitHub Exploit DB Packet Storm
211276 3.5 注意 Compfight - WordPress 用 Compfight プラグインの compfight-search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8622 2014-11-7 15:27 2014-07-3 Show GitHub Exploit DB Packet Storm
211277 7.5 危険 CA Technologies - CA Cloud Service Management における任意のファイルを読まれる脆弱性 CWE-nocwe
CWE以外 		CVE-2014-8474 2014-11-7 15:22 2014-11-3 Show GitHub Exploit DB Packet Storm
211278 6.8 警告 CA Technologies - CA Cloud Service Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-8473 2014-11-7 15:21 2014-11-3 Show GitHub Exploit DB Packet Storm
211279 6.8 警告 CA Technologies - CA Cloud Service Management におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-8472 2014-11-7 15:20 2014-11-3 Show GitHub Exploit DB Packet Storm
211280 4.3 警告 CA Technologies - CA Cloud Service Management における反射攻撃を実行される脆弱性 CWE-noinfo
情報不足 		CVE-2014-8471 2014-11-7 15:20 2014-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307491 - apple darwin_streaming_server
quicktime_streaming_server 		parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via shell metacharacters. NVD-CWE-Other
CVE-2003-0050 2016-10-18 11:28 2003-03-7 Show GitHub Exploit DB Packet Storm
307492 - apple darwin_streaming_server
quicktime_streaming_server 		parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to obtain the physical path of the server's installation path via a NU… NVD-CWE-Other
CVE-2003-0051 2016-10-18 11:28 2003-03-7 Show GitHub Exploit DB Packet Storm
307493 - apple darwin_streaming_server
quicktime_streaming_server 		parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to list arbitrary directories. NVD-CWE-Other
CVE-2003-0052 2016-10-18 11:28 2003-03-7 Show GitHub Exploit DB Packet Storm
307494 - apple darwin_streaming_server
quicktime_streaming_server 		Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to insert arbitrary script… NVD-CWE-Other
CVE-2003-0053 2016-10-18 11:28 2003-03-7 Show GitHub Exploit DB Packet Storm
307495 - apple darwin_streaming_server
quicktime_streaming_server 		Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute certain code via a request to port 7070 with the script in an argument to th… NVD-CWE-Other
CVE-2003-0054 2016-10-18 11:28 2003-03-7 Show GitHub Exploit DB Packet Storm
307496 - apple quicktime_darwin_mp3_broadcaster Buffer overflow in the MP3 broadcasting module of Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to execute arbitrary code via a long … NVD-CWE-Other
CVE-2003-0055 2016-10-18 11:28 2003-03-7 Show GitHub Exploit DB Packet Storm
307497 - eset_software nod32_antivirus Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long path name. NVD-CWE-Other
CVE-2003-0062 2016-10-18 11:28 2003-02-19 Show GitHub Exploit DB Packet Storm
307498 - phorum phorum Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response. CWE-79
Cross-site Scripting 		CVE-2002-2340 2016-10-18 11:28 2002-12-31 Show GitHub Exploit DB Packet Storm
307499 - joe_depasquale bannermatic Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain s… CWE-200
Information Exposure 		CVE-2002-2342 2016-10-18 11:28 2002-12-31 Show GitHub Exploit DB Packet Storm
307500 - hughes_technologies libhttpd Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2002-2400 2016-10-18 11:28 2002-12-31 Show GitHub Exploit DB Packet Storm