Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215761 7.8 危険 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-0701 2014-03-7 16:04 2014-03-5 Show GitHub Exploit DB Packet Storm
215762 10 危険 シスコシステムズ - 複数の Cisco Wireless-N VPN 製品のファームウェアにおける管理アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0683 2014-03-7 15:56 2014-03-5 Show GitHub Exploit DB Packet Storm
215763 7.5 危険 ヒューレット・パッカード - HP Security Management System における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-6201 2014-03-7 15:47 2013-10-21 Show GitHub Exploit DB Packet Storm
215764 5 警告 Novell - Novell ZENworks Configuration Management の PreBoot サービスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3706 2014-03-7 15:45 2013-05-30 Show GitHub Exploit DB Packet Storm
215765 6.4 警告 VideoWhisper.com - WordPress 用 VideoWhisper Live Streaming Integration プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-1907 2014-03-7 15:21 2014-02-27 Show GitHub Exploit DB Packet Storm
215766 4.3 警告 VideoWhisper.com - WordPress 用 VideoWhisper Live Streaming Integration プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1906 2014-03-7 15:20 2014-02-27 Show GitHub Exploit DB Packet Storm
215767 6.5 警告 CMS Made Simple - CMS Made Simple の News モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2245 2014-03-7 15:19 2014-03-1 Show GitHub Exploit DB Packet Storm
215768 1.9 注意 IBM - IBM Sametime の Connect クライアントにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0890 2014-03-7 15:12 2014-02-26 Show GitHub Exploit DB Packet Storm
215769 4 警告 IBM - IBM Tealeaf CX の Passive Capture Application の Web コンソールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-6720 2014-03-7 15:12 2013-11-8 Show GitHub Exploit DB Packet Storm
215770 6 警告 IBM - IBM Tealeaf CX の Passive Capture Application の Web コンソールにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-6719 2014-03-7 15:11 2013-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298931 - webspell webspell Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the board parameter. NOTE: the provenance of this informati… CWE-79
Cross-site Scripting
CVE-2008-1481 2017-08-8 10:30 2008-03-25 Show GitHub Exploit DB Packet Storm
298932 - pecl-php alternative_php_cache Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-1488 2017-08-8 10:30 2008-03-25 Show GitHub Exploit DB Packet Storm
298933 - aurigma
piczo
image_uploader_activex_control
imageuploader4
Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary co… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-1490 2017-08-8 10:30 2008-03-26 Show GitHub Exploit DB Packet Storm
298934 - tinyportal tinyportal Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. NOTE: the provenance o… CWE-79
Cross-site Scripting
CVE-2008-1500 2017-08-8 10:30 2008-03-26 Show GitHub Exploit DB Packet Storm
298935 - phpheaven phpmychat Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject arbitrary web script or HTML via the Lang parameter. NOTE: the provenance of th… CWE-79
Cross-site Scripting
CVE-2008-1504 2017-08-8 10:30 2008-03-26 Show GitHub Exploit DB Packet Storm
298936 - apple mac_os_x
mac_os_x_server
Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (system shutdown) via unspecified vectors related to… CWE-20
 Improper Input Validation 
CVE-2008-1517 2017-08-8 10:30 2009-05-14 Show GitHub Exploit DB Packet Storm
298937 - kaspersky_lab kaspersky_anti-virus
kaspersky_internet_security
Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2008-1518 2017-08-8 10:30 2008-06-6 Show GitHub Exploit DB Packet Storm
298938 - gnupg gnupg GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which trigg… CWE-399
 Resource Management Errors
CVE-2008-1530 2017-08-8 10:30 2008-03-28 Show GitHub Exploit DB Packet Storm
298939 - perlbal perlbal Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload. CWE-20
 Improper Input Validation 
CVE-2008-1532 2017-08-8 10:30 2008-03-28 Show GitHub Exploit DB Packet Storm
298940 - joomla joomla Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors. NVD-CWE-noinfo
CVE-2008-1533 2017-08-8 10:30 2008-03-28 Show GitHub Exploit DB Packet Storm