Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
212731	7.5	危険	Design & Daten	-	Sefrengo の管理バックエンドにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2015-0919	2015-01-9 18:18	2015-01-4	Show	GitHub Exploit DB Packet Storm

212732	4.3	警告	Design & Daten	-	Sefrengo の管理バックエンドにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-0918	2015-01-9 18:17	2015-01-4	Show	GitHub Exploit DB Packet Storm

212733	4.3	警告	Kajona	-	Kajona のバックエンドにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-0917	2015-01-9 18:16	2015-01-5	Show	GitHub Exploit DB Packet Storm

212734	5.1	警告	マイクロソフト	-	Microsoft IIS の IP セキュリティ機能におけるワイルドカードドメイン制限のルールセットを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4078	2015-01-9 17:59	2014-11-11	Show	GitHub Exploit DB Packet Storm

212735	5.8	警告	Canonical libvirt.org	-	libvirt の qemu/qemu_driver.c 内の qemuDomainGetBlockIoTune 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-3633	2015-01-9 17:57	2014-09-17	Show	GitHub Exploit DB Packet Storm

212736	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2014-8439	2015-01-9 17:57	2014-11-25	Show	GitHub Exploit DB Packet Storm

212737	4	警告	レッドハット	-	libvirt の virConnectGetAllDomainStats の qemu の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8131	2015-01-9 16:53	2014-12-11	Show	GitHub Exploit DB Packet Storm

212738	4.3	警告	Open-Xchange	-	Open-Xchange AppSuite のバックエンドにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8993	2015-01-9 16:50	2014-12-3	Show	GitHub Exploit DB Packet Storm

212739	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3779	2015-01-9 16:44	2014-05-13	Show	GitHub Exploit DB Packet Storm

212740	5	警告	DELL EMC (旧 EMC Corporation)	-	EMC Documentum Web Development Kit におけるフィッシング攻撃を実行される脆弱性	CWE-189 数値処理の問題	CVE-2014-4639	2015-01-9 16:41	2014-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351921	-	software602	602pro_lan_suite	The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password p…	NVD-CWE-Other	CVE-2002-2152	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351922	-	cerulean_studios	trillian	Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string…	NVD-CWE-Other	CVE-2002-2155	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351923	-	cerulean_studios	trillian	Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.	NVD-CWE-Other	CVE-2002-2156	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351924	-	zendocs	zentrack	zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.	NVD-CWE-Other	CVE-2002-2158	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351925	-	kerio	personal_firewall	Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood.	NVD-CWE-Other	CVE-2002-2161	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351926	-	cerulean_studios	trillian	Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user account…	NVD-CWE-Other	CVE-2002-2162	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351927	-	killervault	kvpoll	KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php.	NVD-CWE-Other	CVE-2002-2163	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351928	-	microsoft	outlook_express	Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link.	NVD-CWE-Other	CVE-2002-2164	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351929	-	imho	imho_webmail	The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.	NVD-CWE-Other	CVE-2002-2165	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

351930	-	e-zone_media_inc.	fusetalk	Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script.	NVD-CWE-Other	CVE-2002-2166	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm