Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211431 6.8 警告 IBM - IBM WebSphere Portal におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-6125 2014-10-30 16:06 2014-10-24 Show GitHub Exploit DB Packet Storm
211432 5 警告 IBM - IBM WebSphere Portal におけるファイル名の有効性を決定される脆弱性 CWE-200
情報漏えい 		CVE-2014-4821 2014-10-30 16:06 2014-10-24 Show GitHub Exploit DB Packet Storm
211433 3.5 注意 IBM - IBM WebSphere Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-4814 2014-10-30 16:05 2014-10-24 Show GitHub Exploit DB Packet Storm
211434 6.5 警告 IBM - IBM WebSphere Portal における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2014-4808 2014-10-30 16:05 2014-10-24 Show GitHub Exploit DB Packet Storm
211435 6 警告 IBM - IBM TRIRIGA Application Platform の birtviewer.query におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-4839 2014-10-30 15:52 2014-10-8 Show GitHub Exploit DB Packet Storm
211436 5 警告 シスコシステムズ - ASR901 デバイス上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-3293 2014-10-30 14:52 2014-10-27 Show GitHub Exploit DB Packet Storm
211437 4.3 警告 F5 Networks - 複数の F5 BIG-IP 製品の Configuration ユーティリティの tmui/dashboard/echo.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4023 2014-10-30 14:40 2014-08-25 Show GitHub Exploit DB Packet Storm
211438 7.8 危険 openarena
ioquake3
tremulous		 - ioquake3 などで使用される Quake3 Arena の server/sv_main.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-5077 2014-10-30 14:20 2010-01-3 Show GitHub Exploit DB Packet Storm
211439 7.5 危険 WordPress.org - WordPress の wp-links/links.all.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2003-1599 2014-10-30 13:51 2003-06-2 Show GitHub Exploit DB Packet Storm
211440 4 警告 Oliver Eglseder - TYPO3 用 fal_sftp エクステンションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-8327 2014-10-30 13:43 2014-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284541 - microsoft windows_xp The Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involving an "unchecked buffer," probably a buffer overflow. NVD-CWE-Other
CVE-2007-0210 2018-10-13 06:42 2007-02-14 Show GitHub Exploit DB Packet Storm
284542 - microsoft windows_2003_server
windows_xp 		The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a fun… NVD-CWE-Other
CVE-2007-0211 2018-10-13 06:42 2007-02-14 Show GitHub Exploit DB Packet Storm
284543 - microsoft windows_2000
windows_2003_server
windows_xp 		The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uni… NVD-CWE-Other
CVE-2007-0214 2018-10-13 06:42 2007-02-14 Show GitHub Exploit DB Packet Storm
284544 - microsoft office
works 		wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section l… CWE-20
 Improper Input Validation  		CVE-2007-0216 2018-10-13 06:42 2008-02-13 Show GitHub Exploit DB Packet Storm
284545 - motive_incorporated self_service_manager
service_activation_manager 		Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Mana… NVD-CWE-Other
CVE-2007-0319 2018-10-13 06:42 2007-08-16 Show GitHub Exploit DB Packet Storm
284546 - microsoft office
word
word_viewer
works 		Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that t… NVD-CWE-noinfo
CVE-2007-0515 2018-10-13 06:42 2007-01-26 Show GitHub Exploit DB Packet Storm
284547 - microsoft access
excel
excel_viewer
frontpage
infopath
office
onenote
outlook
powerpoint
project
publisher
visio
word
word_viewer 		Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack v… NVD-CWE-noinfo
CVE-2007-0671 2018-10-13 06:42 2007-02-3 Show GitHub Exploit DB Packet Storm
284548 - microsoft windows_vista A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to de… CWE-94
Code Injection 		CVE-2007-0675 2018-10-13 06:42 2007-02-3 Show GitHub Exploit DB Packet Storm
284549 - adobe flash_player Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-4640 2018-10-13 06:41 2006-09-13 Show GitHub Exploit DB Packet Storm
284550 - microsoft office_web_components Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components … CWE-94
Code Injection 		CVE-2006-4695 2018-10-13 06:41 2006-12-31 Show GitHub Exploit DB Packet Storm