Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
213001 7.5 危険 The PHP Group - PHP の ext/standard/var_unserializer.re の process_nested_data 関数における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2014-8142 2014-12-24 16:30 2014-12-18 Show GitHub Exploit DB Packet Storm
213002 5 警告 c-icap project - c-icap の request.c の parse_request 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-7401 2014-12-24 16:30 2013-10-2 Show GitHub Exploit DB Packet Storm
213003 4 警告 Novell - Novell eDirectory の iMonitor の nds/files/opt/novell/eDirectory/lib64/ndsimon/public/images におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5213 2014-12-24 16:22 2014-12-18 Show GitHub Exploit DB Packet Storm
213004 4.3 警告 Novell - Novell eDirectory の iMonitor の nds/search/data におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5212 2014-12-24 16:21 2014-12-18 Show GitHub Exploit DB Packet Storm
213005 - - Besttoolbars - AppsGeyser で作成される Android アプリケーションに SSL 証明書の検証不備の脆弱性が作り込まれる問題 CWE-Other
その他 		- 2014-12-24 15:51 2014-12-19 Show GitHub Exploit DB Packet Storm
213006 4 警告 Puppet - Puppet Enterprise におけるライセンスおよび証明書の署名リクエスト情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9355 2014-12-24 14:43 2014-12-16 Show GitHub Exploit DB Packet Storm
213007 9 危険 Innominate Security Technologies AG - Innominate mGuard のファームウェアにおける root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9193 2014-12-24 14:40 2014-12-17 Show GitHub Exploit DB Packet Storm
213008 6.8 警告 twitterDash project - WordPress 用 twitterDash プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9368 2014-12-24 14:37 2014-12-9 Show GitHub Exploit DB Packet Storm
213009 6.8 警告 yURL ReTwitt project - WordPress 用 yURL ReTwitt プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9341 2014-12-24 14:36 2014-12-9 Show GitHub Exploit DB Packet Storm
213010 6.8 警告 wpCommentTwit project - WordPress 用 wpCommentTwit プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9340 2014-12-24 14:36 2014-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347551 - mutt mutt Mutt mail client allows a remote attacker to execute commands via shell metacharacters. NVD-CWE-Other
CVE-1999-0941 2016-10-18 10:59 1998-07-28 Show GitHub Exploit DB Packet Storm
347552 - yamaha midiplug Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag. NVD-CWE-Other
CVE-1999-0946 2016-10-18 10:59 1999-11-2 Show GitHub Exploit DB Packet Storm
347553 - an an-httpd AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters. NVD-CWE-Other
CVE-1999-0947 2016-10-18 10:59 1999-11-2 Show GitHub Exploit DB Packet Storm
347554 - positive_software cp\+ Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug i… NVD-CWE-Other
CVE-2005-4261 2016-10-15 10:59 2005-12-15 Show GitHub Exploit DB Packet Storm
347555 - softwin bitdefender Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format str… CWE-134
Use of Externally-Controlled Format String 		CVE-2005-3154 2016-09-30 23:33 2005-10-6 Show GitHub Exploit DB Packet Storm
347556 - cisco ios Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data. CWE-200
Information Exposure 		CVE-2000-0368 2016-09-21 22:06 2001-03-12 Show GitHub Exploit DB Packet Storm
347557 - ibm aix Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter. NVD-CWE-Other
CVE-2001-1095 2016-09-17 10:59 2001-10-9 Show GitHub Exploit DB Packet Storm
347558 - phpbb_group phpbb db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2002-0473 2016-09-17 10:59 2002-08-12 Show GitHub Exploit DB Packet Storm
347559 - pablo_software_solutions pablo_ftp_server Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. NVD-CWE-Other
CVE-2002-1054 2016-09-17 10:59 2002-10-4 Show GitHub Exploit DB Packet Storm
347560 - sun java Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and av… NVD-CWE-noinfo
CVE-2010-0887 2016-08-23 11:01 2010-04-21 Show GitHub Exploit DB Packet Storm