Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211621	6.5	警告	Splunk	-	Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8302	2014-10-23 16:57	2014-09-30	Show	GitHub Exploit DB Packet Storm

211622	4.3	警告	Splunk	-	Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8301	2014-10-23 16:56	2014-09-30	Show	GitHub Exploit DB Packet Storm

211623	2.6	注意	Max Foundry, LLC.	-	WordPress 用 Max Foundry MaxButtons プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-7181	2014-10-23 16:55	2014-10-2	Show	GitHub Exploit DB Packet Storm

211624	4.3	警告	Phil Derksen	-	WordPress 用 Google Calendar Events プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-7138	2014-10-23 16:55	2014-10-6	Show	GitHub Exploit DB Packet Storm

211625	4.3	警告	Marc Ferran	-	Drupal 用 Modal Frame API モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8296	2014-10-23 16:54	2014-02-8	Show	GitHub Exploit DB Packet Storm

211626	3.5	注意	Drupal	-	Drupal 用 Custom Search モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8320	2014-10-23 16:20	2014-04-2	Show	GitHub Exploit DB Packet Storm

211627	3.5	注意	Drupal	-	Drupal 用 Easy Social モジュールの easy_social_admin_summary 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8319	2014-10-23 16:20	2014-02-12	Show	GitHub Exploit DB Packet Storm

211628	3.5	注意	Webform project	-	Drupal 用 Webform モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8318	2014-10-23 16:19	2014-02-12	Show	GitHub Exploit DB Packet Storm

211629	3.5	注意	Drupal	-	Drupal 用 Webform Validation モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8317	2014-10-23 16:19	2014-02-11	Show	GitHub Exploit DB Packet Storm

211630	5	警告	IBM	-	IBM WebSphere Application Server における重要な Cookie および認証データを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2014-3021	2014-10-23 14:50	2014-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
284411	-	microsoft	visual_c\+\+ visual_studio visual_studio_.net	The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce strin…	CWE-200 Information Exposure	CVE-2009-2495	2018-10-13 06:51	2009-07-30	Show	GitHub Exploit DB Packet Storm

284412	-	microsoft	biztalk_server internet_security_and_acceleration_server office office_web_components visual_studio_.net	Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Comp…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-2496	2018-10-13 06:51	2009-08-13	Show	GitHub Exploit DB Packet Storm

284413	-	microsoft	windows_2000 windows_2003_server windows_xp	A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers to execute arbitrary…	NVD-CWE-noinfo	CVE-2009-2507	2018-10-13 06:51	2009-10-14	Show	GitHub Exploit DB Packet Storm

284414	-	microsoft	office_powerpoint	Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-0220	2018-10-13 06:50	2009-05-13	Show	GitHub Exploit DB Packet Storm

284415	-	microsoft	office_powerpoint	Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration infor…	CWE-189 Numeric Errors	CVE-2009-0221	2018-10-13 06:50	2009-05-13	Show	GitHub Exploit DB Packet Storm

284416	-	microsoft	office_powerpoint	Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading …	CWE-94 Code Injection	CVE-2009-0222	2018-10-13 06:50	2009-05-13	Show	GitHub Exploit DB Packet Storm

284417	-	microsoft	office_powerpoint	Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading …	CWE-94 Code Injection	CVE-2009-0223	2018-10-13 06:50	2009-05-13	Show	GitHub Exploit DB Packet Storm

284418	-	microsoft	compatibility_pack_word_excel_powerpoint office_compatibility_pack_for_word_excel_ppt_2007 office_powerpoint office_powerpoint_viewer open_xml_file_format_converter powerpoint works	Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML Fil…	CWE-94 Code Injection	CVE-2009-0224	2018-10-13 06:50	2009-05-13	Show	GitHub Exploit DB Packet Storm

284419	-	microsoft	office_powerpoint	Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexi…	CWE-94 Code Injection	CVE-2009-0225	2018-10-13 06:50	2009-05-13	Show	GitHub Exploit DB Packet Storm

284420	-	microsoft	office_powerpoint	Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-0226	2018-10-13 06:50	2009-05-13	Show	GitHub Exploit DB Packet Storm