Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211291	4.9	警告	OpenStack Canonical	-	OpenStack Identity の V3 API におけるトークンの有効期限を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-5252	2014-11-7 12:32	2014-07-25	Show	GitHub Exploit DB Packet Storm

211292	4.9	警告	OpenStack Canonical	-	OpenStack Identity の MySQL トークンドライバにおけるアクセスを保持される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-5251	2014-11-7 12:32	2014-07-27	Show	GitHub Exploit DB Packet Storm

211293	2.1	注意	サイバートラスト株式会社レッドハット	-	XScreenSaver における複数のシンボリックリンク攻撃を受ける脆弱性	-	CVE-2003-1294	2014-11-7 12:25	2003-11-18	Show	GitHub Exploit DB Packet Storm

211294	7.5	危険	ALLPlayer	-	ALLPlayer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-7409	2014-11-7 12:06	2013-10-9	Show	GitHub Exploit DB Packet Storm

211295	9	危険	ヒューレット・パッカード	-	HP LaserJet CM3530 Multifunction Printer CC519A および CC520A のファームウェアにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2014-7875	2014-11-6 19:52	2014-10-30	Show	GitHub Exploit DB Packet Storm

211296	4.3	警告	Allomani	-	Allomani Weblinks におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8593	2014-11-6 19:28	2014-10-5	Show	GitHub Exploit DB Packet Storm

211297	4.3	警告	IBM	-	IBM WebSphere Commerce におけるサービス運用妨害 (DoS) の脆弱性	CWE-nocwe CWE以外	CVE-2014-4834	2014-11-6 19:16	2014-10-30	Show	GitHub Exploit DB Packet Storm

211298	4.3	警告	IBM	-	IBM Cognos Mobile における Business Intelligence の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4810	2014-11-6 19:16	2014-10-28	Show	GitHub Exploit DB Packet Storm

211299	4	警告	IBM	-	IBM WebSphere Commerce における任意のファイルを読まれる脆弱性	CWE-nocwe CWE以外	CVE-2014-4769	2014-11-6 19:16	2014-10-30	Show	GitHub Exploit DB Packet Storm

211300	7.5	危険	Accuenergy	-	Accuenergy Acuvim II 用 AXN-NET Ethernet モジュールアクセサリにおけるパスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2014-2374	2014-11-6 19:15	2014-10-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
284401	-	microsoft	windows_2000 windows_2003_server windows_xp	The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uni…	NVD-CWE-Other	CVE-2007-0214	2018-10-13 06:42	2007-02-14	Show	GitHub Exploit DB Packet Storm

284402	-	microsoft	office works	wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section l…	CWE-20 Improper Input Validation	CVE-2007-0216	2018-10-13 06:42	2008-02-13	Show	GitHub Exploit DB Packet Storm

284403	-	motive_incorporated	self_service_manager service_activation_manager	Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Mana…	NVD-CWE-Other	CVE-2007-0319	2018-10-13 06:42	2007-08-16	Show	GitHub Exploit DB Packet Storm

284404	-	microsoft	office word word_viewer works	Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that t…	NVD-CWE-noinfo	CVE-2007-0515	2018-10-13 06:42	2007-01-26	Show	GitHub Exploit DB Packet Storm

284405	-	microsoft	access excel excel_viewer frontpage infopath office onenote outlook powerpoint project publisher visio word word_viewer	Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack v…	NVD-CWE-noinfo	CVE-2007-0671	2018-10-13 06:42	2007-02-3	Show	GitHub Exploit DB Packet Storm

284406	-	microsoft	windows_vista	A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to de…	CWE-94 Code Injection	CVE-2007-0675	2018-10-13 06:42	2007-02-3	Show	GitHub Exploit DB Packet Storm

284407	-	adobe	flash_player	Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-4640	2018-10-13 06:41	2006-09-13	Show	GitHub Exploit DB Packet Storm

284408	-	microsoft	office_web_components	Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components …	CWE-94 Code Injection	CVE-2006-4695	2018-10-13 06:41	2006-12-31	Show	GitHub Exploit DB Packet Storm

284409	-	microsoft	antigen forefront_security malware_protection_engine windows_defender windows_live_onecare	Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execut…	NVD-CWE-Other	CVE-2006-5270	2018-10-13 06:41	2007-02-14	Show	GitHub Exploit DB Packet Storm

284410	-	microsoft	data_access_components	The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, an…	CWE-20 Improper Input Validation	CVE-2006-5559	2018-10-13 06:41	2006-10-28	Show	GitHub Exploit DB Packet Storm