Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211391	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM Service インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3375	2014-11-4 15:30	2014-11-3	Show	GitHub Exploit DB Packet Storm

211392	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM admin インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3374	2014-11-4 15:30	2014-11-3	Show	GitHub Exploit DB Packet Storm

211393	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM Dialed Number Analyzer インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3373	2014-11-4 15:30	2014-11-3	Show	GitHub Exploit DB Packet Storm

211394	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager のサーバの CCM reports インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3372	2014-11-4 15:29	2014-11-3	Show	GitHub Exploit DB Packet Storm

211395	6.5	警告	シスコシステムズ	-	Cisco Unified Communications Manager の管理 Web インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-3366	2014-11-4 15:29	2014-11-3	Show	GitHub Exploit DB Packet Storm

211396	6.8	警告	Adaptive Computing	-	Terascale Open-Source Resource and Queue Manager の lib/Libifl/tm.c における任意のプロセスを強制終了される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3684	2014-11-4 14:46	2014-10-2	Show	GitHub Exploit DB Packet Storm

211397	7.5	危険	BSS	-	BSS Continuity CMS の wcm/system/pages/admin/getnode.aspx における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-3446	2014-11-4 13:53	2013-10-24	Show	GitHub Exploit DB Packet Storm

211398	5	警告	デル	-	Dell EqualLogic PS4000 のファームウェアにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-3304	2014-11-4 13:48	2013-09-1	Show	GitHub Exploit DB Packet Storm

211399	5.1	警告	drchrono Inc.	-	drchrono Electronic Health Record (EHR) のウェブアプリケーションに複数の脆弱性	-	-	2014-10-31 15:57	2014-10-29	Show	GitHub Exploit DB Packet Storm

211400	4.9	警告	ヒューレット・パッカード	-	HP HP-UX のkernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-7877	2014-10-31 14:44	2014-10-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
284541	-	microsoft	windows_xp	The Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involving an "unchecked buffer," probably a buffer overflow.	NVD-CWE-Other	CVE-2007-0210	2018-10-13 06:42	2007-02-14	Show	GitHub Exploit DB Packet Storm

284542	-	microsoft	windows_2003_server windows_xp	The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a fun…	NVD-CWE-Other	CVE-2007-0211	2018-10-13 06:42	2007-02-14	Show	GitHub Exploit DB Packet Storm

284543	-	microsoft	windows_2000 windows_2003_server windows_xp	The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uni…	NVD-CWE-Other	CVE-2007-0214	2018-10-13 06:42	2007-02-14	Show	GitHub Exploit DB Packet Storm

284544	-	microsoft	office works	wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section l…	CWE-20 Improper Input Validation	CVE-2007-0216	2018-10-13 06:42	2008-02-13	Show	GitHub Exploit DB Packet Storm

284545	-	motive_incorporated	self_service_manager service_activation_manager	Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Mana…	NVD-CWE-Other	CVE-2007-0319	2018-10-13 06:42	2007-08-16	Show	GitHub Exploit DB Packet Storm

284546	-	microsoft	office word word_viewer works	Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that t…	NVD-CWE-noinfo	CVE-2007-0515	2018-10-13 06:42	2007-01-26	Show	GitHub Exploit DB Packet Storm

284547	-	microsoft	access excel excel_viewer frontpage infopath office onenote outlook powerpoint project publisher visio word word_viewer	Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack v…	NVD-CWE-noinfo	CVE-2007-0671	2018-10-13 06:42	2007-02-3	Show	GitHub Exploit DB Packet Storm

284548	-	microsoft	windows_vista	A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to de…	CWE-94 Code Injection	CVE-2007-0675	2018-10-13 06:42	2007-02-3	Show	GitHub Exploit DB Packet Storm

284549	-	adobe	flash_player	Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-4640	2018-10-13 06:41	2006-09-13	Show	GitHub Exploit DB Packet Storm

284550	-	microsoft	office_web_components	Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components …	CWE-94 Code Injection	CVE-2006-4695	2018-10-13 06:41	2006-12-31	Show	GitHub Exploit DB Packet Storm