Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
214451 6.8 警告 NetIQ - NetIQ Access Manager の管理コンソールサーバの nps/servlet/webacc におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-5217 2014-12-24 18:43 2014-12-15 Show GitHub Exploit DB Packet Storm
214452 4.3 警告 NetIQ - NetIQ Access Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5216 2014-12-24 18:43 2014-12-15 Show GitHub Exploit DB Packet Storm
214453 4 警告 NetIQ - NetIQ Access Manager におけるサービスアカウントのパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5215 2014-12-24 18:43 2014-12-15 Show GitHub Exploit DB Packet Storm
214454 4 警告 NetIQ - NetIQ Access Manager の管理コンソールサーバの iManager の nps/servlet/webacc における任意のファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2014-5214 2014-12-24 18:42 2014-07-1 Show GitHub Exploit DB Packet Storm
214455 3.5 注意 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8899 2014-12-24 18:17 2014-12-12 Show GitHub Exploit DB Packet Storm
214456 3.5 注意 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8898 2014-12-24 18:17 2014-12-12 Show GitHub Exploit DB Packet Storm
214457 3.5 注意 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8897 2014-12-24 18:17 2014-12-12 Show GitHub Exploit DB Packet Storm
214458 4 警告 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server における管理者の認証情報を変更される脆弱性 CWE-287
不適切な認証 		CVE-2014-8896 2014-12-24 18:16 2014-12-12 Show GitHub Exploit DB Packet Storm
214459 5 警告 シスコシステムズ - Cisco Enterprise Content Delivery System におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-8019 2014-12-24 18:14 2014-12-22 Show GitHub Exploit DB Packet Storm
214460 4 警告 シスコシステムズ - Cisco Prime Infrastructure における device-discovery パスワードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-8007 2014-12-24 18:14 2014-12-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352501 - samba samba Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password. NVD-CWE-Other
CVE-1999-0182 2008-09-9 21:33 1997-09-30 Show GitHub Exploit DB Packet Storm
352502 - sun solaris In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. NVD-CWE-Other
CVE-1999-0186 2008-09-9 21:33 1998-10-1 Show GitHub Exploit DB Packet Storm
352503 - microsoft internet_information_server IIS newdsn.exe CGI script allows remote users to overwrite files. NVD-CWE-Other
CVE-1999-0191 2008-09-9 21:33 1997-09-1 Show GitHub Exploit DB Packet Storm
352504 - webgais_development_team webgais websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable). NVD-CWE-Other
CVE-1999-0196 2008-09-9 21:33 1997-07-8 Show GitHub Exploit DB Packet Storm
352505 - vtiger vtiger_crm Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions … NVD-CWE-Other
CVE-2006-4617 2008-09-6 06:10 2006-09-7 Show GitHub Exploit DB Packet Storm
352506 - sage sage Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. S… NVD-CWE-Other
CVE-2006-4711 2008-09-6 06:10 2006-09-13 Show GitHub Exploit DB Packet Storm
352507 - e107 e107 Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, … NVD-CWE-Other
CVE-2006-4794 2008-09-6 06:10 2006-09-15 Show GitHub Exploit DB Packet Storm
352508 - xine xine-lib Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005… NVD-CWE-Other
CVE-2006-4799 2008-09-6 06:10 2006-09-15 Show GitHub Exploit DB Packet Storm
352509 - blojsom blojsom Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of … NVD-CWE-Other
CVE-2006-4830 2008-09-6 06:10 2006-09-16 Show GitHub Exploit DB Packet Storm
352510 - blojsom blojsom This vulnerability is addressed in the following product release: Blojsom, Blojsom, 2.31 NVD-CWE-Other
CVE-2006-4830 2008-09-6 06:10 2006-09-16 Show GitHub Exploit DB Packet Storm