Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215051 7.5 危険 DomPHP - DomPHP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-10037 2015-01-19 14:33 2014-01-12 Show GitHub Exploit DB Packet Storm
215052 4.3 警告 JetBrains - JetBrains TeamCity におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-10036 2015-01-19 14:24 2014-03-6 Show GitHub Exploit DB Packet Storm
215053 4.3 警告 couponPHP - couponPHP の管理エリアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-10035 2015-01-19 14:05 2014-03-2 Show GitHub Exploit DB Packet Storm
215054 6.5 警告 couponPHP - couponPHP の管理エリアにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-10034 2015-01-19 13:55 2014-03-2 Show GitHub Exploit DB Packet Storm
215055 6.5 警告 osCommerce - osCommerce Online Merchant の catalog/admin/geo_zones.php の update_zone 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-10033 2015-01-19 13:44 2014-02-4 Show GitHub Exploit DB Packet Storm
215056 6.5 警告 Script Brasil - Taboada MacroNews の news_popup.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-10032 2015-01-19 13:37 2014-01-4 Show GitHub Exploit DB Packet Storm
215057 7.5 危険 クアルコム - Qualcomm Eudora WorldMail の IMAPd サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-10031 2015-01-19 12:29 2014-02-16 Show GitHub Exploit DB Packet Storm
215058 2.1 注意 Malwarebytes - Malwarebytes Anti-Exploit の mbae.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-100039 2015-01-19 12:16 2014-12-1 Show GitHub Exploit DB Packet Storm
215059 4.3 警告 Storytlr - Storytlr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-100038 2015-01-19 12:10 2014-03-6 Show GitHub Exploit DB Packet Storm
215060 4.3 警告 Storytlr - Storytlr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-100037 2015-01-19 12:08 2014-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346001 - hp tru64 Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges… NVD-CWE-Other
CVE-2004-2678 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346002 - checkpoint firewall-1 Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes F… NVD-CWE-Other
CVE-2004-2679 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346003 - peersec_networks matrixssl PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session. NVD-CWE-Other
CVE-2004-2681 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346004 - newsphp newsphp Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. NOTE: this issue might overlap vector 3 in C… CWE-79
Cross-site Scripting 		CVE-2004-2688 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346005 - newsphp newsphp NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-2689 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346006 - newsphp newsphp Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files. NVD-CWE-Other
CVE-2004-2690 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346007 - 3com 3c17205-us
3c17210-us
superstack_3_switch 		Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web man… NVD-CWE-Other
CVE-2004-2691 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346008 - kyberdigi_labs php-exec-dir The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not h… CWE-16
CWE-264
Configuration
Permissions, Privileges, and Access Controls 		CVE-2004-2692 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346009 - bea weblogic_server BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for differ… CWE-255
Credentials Management 		CVE-2004-2696 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346010 - ibm aix The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file). NOTE: this might be r… CWE-362
Race Condition 		CVE-2004-2697 2017-07-29 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm