Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
213641 7.5 危険 FFmpeg - FFmpeg の libavcodec/utvideodec.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-9604 2015-01-23 13:46 2014-12-17 Show GitHub Exploit DB Packet Storm
213642 7.5 危険 FFmpeg - FFmpeg の libavcodec/vmdvideo.c 内の vmd_decode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-9603 2015-01-23 13:45 2014-12-17 Show GitHub Exploit DB Packet Storm
213643 7.5 危険 FFmpeg - FFmpeg の libavcodec/xface.h におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-9602 2015-01-23 13:45 2014-12-17 Show GitHub Exploit DB Packet Storm
213644 6.5 警告 Puppet - Puppet 用 puppetlabs-stdlib モジュールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-1029 2015-01-23 10:43 2015-01-14 Show GitHub Exploit DB Packet Storm
213645 6.5 警告 レッドハット - Red Hat CloudForms Management Engine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-7814 2015-01-23 10:17 2015-01-14 Show GitHub Exploit DB Packet Storm
213646 7.8 危険 ジュニパーネットワークス - Juniper Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-6386 2015-01-23 10:17 2014-09-11 Show GitHub Exploit DB Packet Storm
213647 6.1 警告 ジュニパーネットワークス - Juniper Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-6385 2015-01-23 10:16 2014-09-11 Show GitHub Exploit DB Packet Storm
213648 6.9 警告 ジュニパーネットワークス - Juniper Junos におけるセキュリティポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-6384 2015-01-23 10:16 2014-09-11 Show GitHub Exploit DB Packet Storm
213649 5 警告 ジュニパーネットワークス - Juniper Junos のステートレスファイアウォールにおけるファイアウォールのルールを回避される脆弱性 CWE-Other
その他 		CVE-2014-6383 2015-01-23 10:16 2014-09-11 Show GitHub Exploit DB Packet Storm
213650 7.1 危険 ジュニパーネットワークス - Juniper Junos の MX Series ルータにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6382 2015-01-23 10:15 2014-09-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346631 - cherokee cherokee_httpd Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C comm… NVD-CWE-Other
CVE-2004-1946 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
346632 - softwin bitdefender The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestF… NVD-CWE-Other
CVE-2004-1947 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
346633 - ncftp_software ncftp NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which di… NVD-CWE-Other
CVE-2004-1948 2017-07-11 10:31 2004-04-20 Show GitHub Exploit DB Packet Storm
346634 - postnuke_software_foundation postnuke SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset paramete… NVD-CWE-Other
CVE-2004-1949 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346635 - phpbb_group phpbb phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses. NVD-CWE-Other
CVE-2004-1950 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
346636 - xine xine
xine-lib
xine-ui 		xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename option… NVD-CWE-Other
CVE-2004-1951 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346637 - advanced_guestbook advanced_guestbook SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password. NVD-CWE-Other
CVE-2004-1952 2017-07-11 10:31 2004-04-23 Show GitHub Exploit DB Packet Storm
346638 - phprofession phprofession phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message. NVD-CWE-Other
CVE-2004-1953 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346639 - phprofession phprofession Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter. NVD-CWE-Other
CVE-2004-1954 2017-07-11 10:31 2004-04-21 Show GitHub Exploit DB Packet Storm
346640 - phprofession phprofession SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter. NVD-CWE-Other
CVE-2004-1955 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm