Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
214791 3.5 注意 PivotX - PivotX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0341 2014-04-16 19:08 2014-03-3 Show GitHub Exploit DB Packet Storm
214792 5 警告 ModSecurity - ModSecurity の apache2/modsecurity.c におけるルールを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5705 2014-04-16 19:04 2013-12-16 Show GitHub Exploit DB Packet Storm
214793 7.5 危険 Construtiva Internet Software - CIS Manager CMS の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2847 2014-04-16 19:02 2014-04-2 Show GitHub Exploit DB Packet Storm
214794 4.3 警告 apps4u@android - SD Card Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-1969 2014-04-16 18:21 2014-04-11 Show GitHub Exploit DB Packet Storm
214795 5 警告 OpenAFS - OpenAFS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2852 2014-04-16 17:48 2014-04-3 Show GitHub Exploit DB Packet Storm
214796 5 警告 OpenAFS - OpenAFS の GetStatistics64 リモートプロシージャコールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0159 2014-04-16 17:48 2014-04-3 Show GitHub Exploit DB Packet Storm
214797 6.9 警告 Linux - Linux Kernel の net/ipv4/ping.c 内の ping_init_sock 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-2851 2014-04-16 16:57 2014-04-14 Show GitHub Exploit DB Packet Storm
214798 4.6 警告 Linux - Linux Kernel の drivers/infiniband/core/cma.c 内の cma_req_handler 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2739 2014-04-16 16:51 2014-04-2 Show GitHub Exploit DB Packet Storm
214799 7.1 危険 Linux - Linux Kernel の mac80211 サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2014-2706 2014-04-16 16:36 2014-03-23 Show GitHub Exploit DB Packet Storm
214800 5.5 警告 Linux - Linux Kernel の virt/kvm/ioapic.c の ioapic_deliver 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0155 2014-04-16 16:15 2014-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289301 - zomplog zomplog Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modifi… CWE-20
 Improper Input Validation 
CVE-2007-5231 2017-10-19 10:30 2007-10-6 Show GitHub Exploit DB Packet Storm
289302 - wzdftpd wzdftpd Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other versions allows remote attackers to cause a denial of service (daemon crash) via … CWE-189
CWE-119
Numeric Errors
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-5300 2017-10-19 10:30 2007-10-10 Show GitHub Exploit DB Packet Storm
289303 - verlihub-project verlihub_control_panel Directory traversal vulnerability in index.php in Verlihub Control Panel (VHCP) 1.7 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the page parameter. CWE-94
CWE-22
Code Injection
Path Traversal
CVE-2007-5321 2017-10-19 10:30 2007-10-10 Show GitHub Exploit DB Packet Storm
289304 - verlihub-project verlihub_control_panel Successful exploitation requires that "magic_quotes_gpc" is disabled. CWE-94
CWE-22
Code Injection
Path Traversal
CVE-2007-5321 2017-10-19 10:30 2007-10-10 Show GitHub Exploit DB Packet Storm
289305 - cowon_america jetaudio Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-5487 2017-10-19 10:30 2007-10-17 Show GitHub Exploit DB Packet Storm
289306 - devmass devmass_cart PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfm_base_path param… CWE-20
 Improper Input Validation 
CVE-2007-6133 2017-10-19 10:30 2007-11-28 Show GitHub Exploit DB Packet Storm
289307 - phpkit phpkit SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contentid parameter in an article action to include.php, a… CWE-89
SQL Injection
CVE-2007-6134 2017-10-19 10:30 2007-11-28 Show GitHub Exploit DB Packet Storm
289308 - p3mbo content_injector SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtaine… CWE-89
SQL Injection
CVE-2007-6137 2017-10-19 10:30 2007-11-28 Show GitHub Exploit DB Packet Storm
289309 - iaprcommence iapr_commence Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (a) php_root_path and sometimes the (b) privilege_root_pa… CWE-94
Code Injection
CVE-2007-6147 2017-10-19 10:30 2007-11-28 Show GitHub Exploit DB Packet Storm
289310 - wire_plastic_design wpquiz Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewimage.php and (2) comments.php. CWE-89
SQL Injection
CVE-2007-6172 2017-10-19 10:30 2007-11-30 Show GitHub Exploit DB Packet Storm