Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218461 7.8 危険 Zoho Corporation - ManageEngine OpUtils の ConfigSaveServlet サーブレットにおけるファイルを公開される脆弱性 CWE-200
情報漏えい
CVE-2014-8678 2014-11-27 14:58 2014-11-21 Show GitHub Exploit DB Packet Storm
218462 5 警告 シスコシステムズ - Network Convergence System 6000 デバイス上で稼働する Cisco IOS XR の lighttpd モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2014-8005 2014-11-27 14:53 2014-11-25 Show GitHub Exploit DB Packet Storm
218463 6.5 警告 Jexperts - JExperts Channel Platform におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8558 2014-11-27 14:46 2014-10-27 Show GitHub Exploit DB Packet Storm
218464 4.3 警告 IBM - IBM Web Experience Factory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6196 2014-11-27 14:45 2014-11-12 Show GitHub Exploit DB Packet Storm
218465 3.5 注意 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6093 2014-11-27 14:45 2014-11-21 Show GitHub Exploit DB Packet Storm
218466 9 危険 デル - 複数の Dell SonicWALL 製品の ViewPoint Web アプリケーションにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-8420 2014-11-27 14:37 2014-11-21 Show GitHub Exploit DB Packet Storm
218467 9 危険 アルバネットワークス株式会社 - Aruba Networks AirWave の Web インターフェースにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8368 2014-11-27 14:28 2014-11-19 Show GitHub Exploit DB Packet Storm
218468 7.5 危険 アルバネットワークス株式会社 - Aruba Networks ClearPass Policy Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8367 2014-11-27 14:27 2014-11-19 Show GitHub Exploit DB Packet Storm
218469 7.2 危険 Canonical - Ubuntu で使用される mountall におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1421 2014-11-27 13:49 2014-11-18 Show GitHub Exploit DB Packet Storm
218470 4.7 警告 Linux - Linux Kernel の fs/udf/inode.c の __udf_read_inode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-6410 2014-11-26 18:04 2014-09-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290511 - paperthin commonspot_content_server Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing i… NVD-CWE-Other
CVE-2014-2867 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290512 - paperthin commonspot_content_server PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restrictions, which allows remote attackers to perform unspecified operations by modifying this code. CWE-94
Code Injection
CVE-2014-2866 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290513 - paperthin commonspot_content_server PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname o… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2865 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290514 - paperthin commonspot_content_server Multiple directory traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a filename parameter containing directo… CWE-22
Path Traversal
CVE-2014-2864 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290515 - paperthin commonspot_content_server Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a full pathname in a parameter. CWE-22
Path Traversal
CVE-2014-2863 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290516 - paperthin commonspot_content_server PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations, which allows remote authenticated users to perform actions via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2862 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290517 - paperthin commonspot_content_server Incomplete blacklist vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string, as demonstrate… NVD-CWE-Other
CVE-2014-2861 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290518 - paperthin commonspot_content_server Multiple cross-site scripting (XSS) vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to inject arbitrary web script or HTML via a crafted HTTP request … CWE-79
Cross-site Scripting
CVE-2014-2860 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290519 - paperthin commonspot_content_server PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a direct request. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2859 2024-11-21 11:07 2014-04-16 Show GitHub Exploit DB Packet Storm
290520 - juniper screenos Juniper ScreenOS 6.3 and earlier allows remote attackers to cause a denial of service (crash and restart or failover) via a malformed SSL/TLS packet. CWE-399
 Resource Management Errors
CVE-2014-2842 2024-11-21 11:07 2014-04-15 Show GitHub Exploit DB Packet Storm